Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
07/03/2025, 16:21
Behavioral task
behavioral1
Sample
MetaTrader.exe
Resource
win7-20240903-en
2 signatures
150 seconds
General
-
Target
MetaTrader.exe
-
Size
29KB
-
MD5
ff47b6c78043112f3fbb2aabcea02342
-
SHA1
c4ed40140c5a56bb2d5d09dbcd683980eea7e59c
-
SHA256
194247b2d4724928446b4cdea53167be6cf0ebd60858ca0c2d4bdc6cdb5a4c54
-
SHA512
4699036962c5f14ad42fb32f6f5c7e13dad2b57023b0efcfafd2a9c698d44f1e704b5f62fd176ff85cecab09cf236d9a7aa778e3054d0452d0b2752c2e495366
-
SSDEEP
384:piY/4mcwYPSNOjKjg11+rVlOxxtNP97kJkgQ8pwIIumVbgORBprjlJZpTJ3uPbHM:piWWjjKjrOFgwItmVsOlr1B+9I/
Malware Config
Signatures
-
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MetaTrader.exe