Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    21/10/2024, 14:13

General

  • Target

    ec2a17ea1fc8c8d6991d51d16bfef8adaa5363321c7ff63ae73698d004603550.exe

  • Size

    3.0MB

  • MD5

    e64549c7e69be6979c10e67cdbbea71f

  • SHA1

    f920760234c0bff937d219e0752d3100e9ab66c8

  • SHA256

    ec2a17ea1fc8c8d6991d51d16bfef8adaa5363321c7ff63ae73698d004603550

  • SHA512

    c7799b36f2c0933e79ea59d61b257cfa13674fee2c08d9c06c57eab6ba77e583c1b0a3a6372643017bbfde5ab037f17e5e8dea516d37639126b4cfd043e6c58d

  • SSDEEP

    49152:Syjabd4/75aItlMuBwXWWBsRklZCycWM+qqfTOQCtiUAps:LOq1CbX8e/fTOlm

Score
7/10

Malware Config

Signatures

  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Looks up external IP address via web service 2 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious behavior: EnumeratesProcesses 34 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ec2a17ea1fc8c8d6991d51d16bfef8adaa5363321c7ff63ae73698d004603550.exe
    "C:\Users\Admin\AppData\Local\Temp\ec2a17ea1fc8c8d6991d51d16bfef8adaa5363321c7ff63ae73698d004603550.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1752

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Microsoft\HWouGzDBFyYMhA23\chrome\Default\session

          Filesize

          92KB

          MD5

          f98745d81e8b84f39630844a63afc1ee

          SHA1

          d7977c2dab5de25630f7d869f9b16a8502cd3bb3

          SHA256

          9c34e13f0d2852fb4a8a53a4727a59d24691a507edb6ff1965024a6147799a83

          SHA512

          e6b1bf12139e627d6aa2b25c9d7e8ebab1e86fc3025655bf88bc735413f55b10490f0237b8d11fd5db0eb6045f6176e93228c70d8e940a62ea4324816c31a3dd