Analysis
-
max time kernel
96s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
20-09-2024 07:43
General
-
Target
bazaar.2020.02/HEUR-Trojan-PSW.MSIL.Agent.exe
-
Size
10KB
-
MD5
4018af561a2811c089c8a7046d8e8403
-
SHA1
654e645b6530c7649482ae977b0758545c98af4f
-
SHA256
3690d1d02801a5cb5fbfe075853eb580648c681cf8fe11f9d3e77239ae1c617a
-
SHA512
d29de7849eb8bf91027e93a24b2016fea857512338cb8fe9bbaa074ab96135ad7c7f85580c0d0d29f2c5a4bf4bb58960e74ec27e2a66079624a08646f6a520f0
-
SSDEEP
192:R5Ryer0p8CMNE97k9fLK5ro5sWJEKL57rZHTI:R5Ry+0phG44VK5ro5NEKN7FHT
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\bazaar.2020.02\HEUR-Trojan-PSW.MSIL.Agent.exe"C:\Users\Admin\AppData\Local\Temp\bazaar.2020.02\HEUR-Trojan-PSW.MSIL.Agent.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
32KB