Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    19/01/2025, 18:44

General

  • Target

    1c09331c164762530458d63b7e50ea859cf281aaf9ffd2d37767912ad4be0aa8N.exe

  • Size

    2.3MB

  • MD5

    694b77aa5496a67799f17bf4ecf54440

  • SHA1

    f5aef9f593d0793843661c14cd6a6ed155cb1e43

  • SHA256

    1c09331c164762530458d63b7e50ea859cf281aaf9ffd2d37767912ad4be0aa8

  • SHA512

    4dd417ba37bf67220b7f9c5897f4c72c9d1e70fc3b9926f10296d0d96e2a67f7e8bbb966fbc55721396afec9cc40b827661b9f65ba25245115856df1ec788ff2

  • SSDEEP

    24576:CqZOzvILGQENV0I1ImmxVykKpZ3U6mFd7YgHV+NXOZgG8qb34LRzUAWT7rN2m5BN:CqZsILvENVwVykmNU60dicDD4RuM8F

Malware Config

Signatures

  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1c09331c164762530458d63b7e50ea859cf281aaf9ffd2d37767912ad4be0aa8N.exe
    "C:\Users\Admin\AppData\Local\Temp\1c09331c164762530458d63b7e50ea859cf281aaf9ffd2d37767912ad4be0aa8N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    PID:2204

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2204-0-0x0000000000400000-0x0000000000889000-memory.dmp

          Filesize

          4.5MB

        • memory/2204-1-0x0000000000400000-0x0000000000852000-memory.dmp

          Filesize

          4.3MB

        • memory/2204-2-0x0000000000400000-0x0000000000889000-memory.dmp

          Filesize

          4.5MB

        • memory/2204-3-0x0000000000400000-0x0000000000852000-memory.dmp

          Filesize

          4.3MB

        • memory/2204-4-0x0000000000400000-0x0000000000889000-memory.dmp

          Filesize

          4.5MB

        • memory/2204-5-0x0000000000400000-0x0000000000889000-memory.dmp

          Filesize

          4.5MB

        • memory/2204-6-0x0000000000400000-0x0000000000852000-memory.dmp

          Filesize

          4.3MB