55cf43618fc916410807db3e835418cbbbba0176308235d65af4067cfbb73f97 | Triage

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
07-01-2025 10:33

Sharing

Report Analysis Logs

General

Target

Sigmanly_55cf43618fc916410807db3e835418cbbbba0176308235d65af4067cfbb73f97.exe
Size

20KB
MD5

fa5af574f7542f9f4c541c91b8c760bb
SHA1

e91df22605ad5439ea57b27b06a39ca8a70e038a
SHA256

55cf43618fc916410807db3e835418cbbbba0176308235d65af4067cfbb73f97
SHA512

63f0b540f12609f4cdda1f7a2f63e24378b14a0f010da78ab1a4b7cfb85d2ed6a1c4f1a8b4413156d6ff061dbd69aaf70958448fefc653a2e3a7ec62c21b3bb2
SSDEEP

384:QI80WLc01PPz9ACtjUk4/ibYTJ4JVB00UySVR:Q15PPCCVUOYAvU

Score

7^/10

spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

C:\Users\Admin\AppData\Local\Temp\Sigmanly_55cf43618fc916410807db3e835418cbbbba0176308235d65af4067cfbb73f97.exe
"C:\Users\Admin\AppData\Local\Temp\Sigmanly_55cf43618fc916410807db3e835418cbbbba0176308235d65af4067cfbb73f97.exe"
1⤵
PID:3060

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads