Analysis
-
max time kernel
119s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
27-10-2024 22:21
General
-
Target
winpirate-master/Tools/Browsinghistoryview/BrowsingHistoryView.exe
-
Size
351KB
-
MD5
18926758c88d56d0178670093f0f4fac
-
SHA1
63ad210d4c628eaecd6a63194f7c17d33eea851f
-
SHA256
2033380cf345c3c743aefffe9e261457b23ececdb6ddd6ffe21436e6f71a8696
-
SHA512
b38de35b0a12b8e3b7a151c2c0a730ff4bbc36d37d51a8168f54296f84337496234e9b58e2a12eeff9ed06eac38b1650829eb069e350385c62ccf6d9cecc4ad1
-
SSDEEP
6144:6vg/wvLP8X2xL5R4Y7Ieh2Mc2zAyPFpm+UXnwhtAtJhqq:6YYz7IFqAyPnGI07
Score
3/10
Malware Config
Signatures
-
Browser Information Discovery 1 TTPs
Enumerate browser information.
-
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\winpirate-master\Tools\Browsinghistoryview\BrowsingHistoryView.exe"C:\Users\Admin\AppData\Local\Temp\winpirate-master\Tools\Browsinghistoryview\BrowsingHistoryView.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam