ad6ebf30d440ca7d53b1552f3f6fc3d8f15edc94ee15f4517a45777deb9d1ec0

Analysis

max time kernel
147s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
20/06/2024, 04:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ad6ebf30d440ca7d53b1552f3f6fc3d8f15edc94ee15f4517a45777deb9d1ec0.exe
Size 9.0MB
Sample240620-e4gcxatbmr
SHA256 ad6ebf30d440ca7d53b1552f3f6fc3d8f15edc94ee15f4517a45777deb9d1ec0
MD5 396cd09256fa4a4b053e51bb093dffe6
SHA1 8dc0312c309fd218a57eae4d1d0ae3f7e33e3492
SHA512 f73d8ca2388152b6306615e955674861360bf859bcc4b8f6fb0423e398db98446477cef9a5c61562c8934a63a2d548ee42a122fd8ec8b233b3e37747a9155934
SSDEEP 196608:nSJcDKlFBqZcPzFwDxURK8vyqByLdlf3hRQIgLKN:SODKlFBqauayOclfhRQIG2
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4532	ad6ebf30d440ca7d53b1552f3f6fc3d8f15edc94ee15f4517a45777deb9d1ec0.exe
4532	ad6ebf30d440ca7d53b1552f3f6fc3d8f15edc94ee15f4517a45777deb9d1ec0.exe

C:\Users\Admin\AppData\Local\Temp\ad6ebf30d440ca7d53b1552f3f6fc3d8f15edc94ee15f4517a45777deb9d1ec0.exe
"C:\Users\Admin\AppData\Local\Temp\ad6ebf30d440ca7d53b1552f3f6fc3d8f15edc94ee15f4517a45777deb9d1ec0.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4532

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads