Analysis
-
max time kernel
96s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
22-12-2024 12:44
General
-
Target
e15ddac066f10306af38d775cefdf36ab8f779501dd8e2ad8d801988b45facce.exe
-
Size
9.0MB
-
MD5
df27f95ddd678a9b24d06ab749d7acb5
-
SHA1
f29c0ad17d11d2b59ef6b4b36a6e503e104bfc78
-
SHA256
e15ddac066f10306af38d775cefdf36ab8f779501dd8e2ad8d801988b45facce
-
SHA512
5d89d79841743b0dc556d40ac7ed38d2c5b3f01ddd3af670580d65916459a810fcfe1c911846476a1b3ed38987b0434a6aae7c19eb6686ed887eb0246f642a20
-
SSDEEP
196608:fTJcDKlFBqZcPzFwDxURK8vyqByLdlf3hRQIgLKN:rODKlFBqauayOclfhRQIG2
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e15ddac066f10306af38d775cefdf36ab8f779501dd8e2ad8d801988b45facce.exe"C:\Users\Admin\AppData\Local\Temp\e15ddac066f10306af38d775cefdf36ab8f779501dd8e2ad8d801988b45facce.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx