Analysis
-
max time kernel
94s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20-01-2025 06:21
General
-
Target
[].exe
-
Size
9.1MB
-
MD5
c8250af6634fc8849b9f7ce2e551cd48
-
SHA1
82c2cd10b575a9117fc51556d3bd5ade091461ce
-
SHA256
06bc11cf49d62eb1c179fde516002e081593874fe13e88c58e13b6f5f18740c9
-
SHA512
1b0f9a964cab7ff4b362c5a5d79f69b94f41326582724bf2465598a512667f6b7639744131bb0dc06df0230e0a7f94090767c9591476d972e09ac0c542d4a610
-
SSDEEP
196608:N0JcDKlFBqZcPz5jGVARK8OSqY4i5KPa/hdHDRQIgLKN:CODKlFBqa99qs5x/jHDRQIG2
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\[].exe"C:\Users\Admin\AppData\Local\Temp\[].exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx