hackbrowserdata | 6f52ee31150352374b2a1b234dfab53719c03ead9dfabd12f49855b4b6e1a578

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
21/03/2025, 20:25

Target

2025-03-21_231cfe7945ffdaabe0c25e06201f22c0_snatch.exe
Size

8.3MB
MD5

231cfe7945ffdaabe0c25e06201f22c0
SHA1

873bc862b40ecf777200257ebd362c5ec387a558
SHA256

6f52ee31150352374b2a1b234dfab53719c03ead9dfabd12f49855b4b6e1a578
SHA512

42be9e831b615e3f40bc4ee1ac58d55dbb8f8b3dd6735377a4b0f1056b11deb0792fdd1e02fbbb19922ead2527b906fb43de40b1ce95deb6d3ba7bd7516bcfcf
SSDEEP

196608:OsxoiaTocguEzOytYaSRmRjOXK0Ymdp58f9QVaBClOOHFwhlwh7g:Osq/S7HjGKfcp5hZFswh7g

Score

10^/10

An open source browser data exporter written in golang. 1 IoCs

resource	yara_rule
behavioral1/memory/2140-0-0x0000000000910000-0x0000000001825000-memory.dmp	family_hackbrowserdata

HackBrowserData
An open source golang web browser extractor.
infostealer hackbrowserdata
Hackbrowserdata family
hackbrowserdata

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2140-0-0x0000000000910000-0x0000000001825000-memory.dmp	upx
behavioral1/memory/2140-1-0x0000000000910000-0x0000000001825000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2025-03-21_231cfe7945ffdaabe0c25e06201f22c0_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2025-03-21_231cfe7945ffdaabe0c25e06201f22c0_snatch.exe"
1⤵
PID:2140

memory/2140-0-0x0000000000910000-0x0000000001825000-memory.dmp

Filesize
15.1MB

Download
memory/2140-1-0x0000000000910000-0x0000000001825000-memory.dmp

Filesize
15.1MB

Download