b31f5d2d5f5be42cd99eb363ea4b8bb75a0cb0dd2f376016e5d3acc3c68f7b0a

Analysis

max time kernel
149s
max time network
122s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
14/07/2024, 08:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Boleto_Referente_Julho.scr
Size

48KB
MD5

c316c61289505803158e4a8b8b316251
SHA1

cad174b826b4758322accfe69209d2de18c887da
SHA256

3c24c29a358394c80975e4fd303ee71348b11dcb8058ff43ec3c316b790b6398
SHA512

84a483e46ef540d64dd9dfc37e6b0dbd5b6739b1568d4b230ae8d1ff430b642900d1d218d9b7363072cd5a0c482e0e678051a92d73ca08821d94781f25a2a628
SSDEEP

768:DkGoGPhn8RiC5KTi/ch5zvamG2CIGYSN5P:DkBGPhnDC5EiMzSLYSfP

Score

7^/10

spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2420	Boleto_Referente_Julho.scr

C:\Users\Admin\AppData\Local\Temp\Boleto_Referente_Julho.scr
"C:\Users\Admin\AppData\Local\Temp\Boleto_Referente_Julho.scr" /S
1⤵
- Suspicious use of SetWindowsHookEx
PID:2420

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yrxx2hps.Admin\prefs.js

Filesize
109B

MD5
b27650427475854bf7efd3c74deced34

SHA1
710a8259ebf55382b733c1679f2646dd46af4882

SHA256
c298198df1812b10c9a032014040b37785834915ad733cf20843e7900ccf5a80

SHA512
2338828bb7692ce2301874dcaccd497852733b25fa9e80d68b5c28494875a0d8632e27feb02ab5da822f487e18eb13bdc714aea8d0cbf2d373da7f780bbc09b3

Download Submit