Analysis
-
max time kernel
138s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
24/07/2024, 05:02
General
-
Target
24c76871e844d80ed4b9622853ba3492.exe
-
Size
6.7MB
-
MD5
24c76871e844d80ed4b9622853ba3492
-
SHA1
df3395f4d49a3a9e680cedd6af46220dc048e239
-
SHA256
c4cfe8587360a3fa73fa5cb09ec3bcf55a21d8991d42af77d2bf93fef83d5e97
-
SHA512
ddade4fe65a8189fc8fdd8ac452a80abf0d102c2ed72c79d98831c6f784177db74adb338289da1b90ef9bbfd7c614793a455ce1a2f1924fff8886c15af1d7fda
-
SSDEEP
98304:uYuTbLi9oqTRXpP5OdiB73Q07pVTjrc/eEz0/phh1lQ:lQaJl8CQGpVQ/eW0/dnQ
Score
9/10
Malware Config
Signatures
-
Credentials from Password Stores: Credentials from Web Browsers 1 TTPs
Malicious Access or copy of Web Browser Credential store.
-
Reads WinSCP keys stored on the system 2 TTPs
Tries to access WinSCP stored sessions.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Browser Information Discovery 1 TTPs
Enumerate browser information.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\24c76871e844d80ed4b9622853ba3492.exe"C:\Users\Admin\AppData\Local\Temp\24c76871e844d80ed4b9622853ba3492.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
3.3MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
6.7MB
-
Filesize
4KB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.3MB
-
Filesize
3.1MB
-
Filesize
2.0MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
2.0MB