BrowserDataCollector[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
BrowserDataCollector.exe
Size 1.5MB
Sample261027-tdqk8aet2x
SHA256 3fc282951612d075853d1c93d1f96c4ac03288e637c3a27da27e4495ec029587
MD5 540ea2ebfa1111faa99c78b1d9ec64dc
SHA1 f623369f60952ef146876eef72cc4c25d9aa476d
SHA512 0e1194f90a9c41c0a4972e6524c956cf8ec2d39293433df70d24908c6d06da7129c2145cbdc642dd57d0cb847d8236f13aebd818030d1cb117514920cd0f802e
SSDEEP 49152:9yktJcePm0rpCwiwsqTtf9754sy2ZKXIDeeXld/v:DPxjXld/v
TLSH
T12A75F872D7E2C8ACC5EB92747B8B87D26579FD680635A25B028815027F0BD602FDE3D1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BrowserDataCollector.exe

File Explorer

BrowserDataCollector.exe

.exe 1.5MB

BrowserDataCollector.exe

IMPHASH c810927c3b6c7f5b1ea9c6585d2ddcbf
SHA256 3fc282951612d075853d1c93d1f96c4ac03288e637c3a27da27e4495ec029587
MD5 540ea2ebfa1111faa99c78b1d9ec64dc
SHA1 f623369f60952ef146876eef72cc4c25d9aa476d
SHA512 0e1194f90a9c41c0a4972e6524c956cf8ec2d39293433df70d24908c6d06da7129c2145cbdc642dd57d0cb847d8236f13aebd818030d1cb117514920cd0f802e
SSDEEP 49152:9yktJcePm0rpCwiwsqTtf9754sy2ZKXIDeeXld/v:DPxjXld/v
TLSH
T12A75F872D7E2C8ACC5EB92747B8B87D26579FD680635A25B028815027F0BD602FDE3D1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5248

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

crypt32

CryptUnprotectData

libgcc_s_seh-1

_Unwind_Resume

kernel32

AcquireSRWLockExclusive AreFileApisANSI CloseHandle CopyFileA CreateFileMappingW CreateFileW DeleteCriticalSection DeleteFileA DeleteFileW EnterCriticalSection FindClose FindFirstFileA FindNextFileA FlushFileBuffers FlushViewOfFile FormatMessageW FreeLibrary GetConsoleWindow GetCurrentProcessId GetCurrentThreadId GetDriveTypeW GetFileAttributesExW GetFileAttributesW GetFileSizeEx GetFullPathNameW GetLastError GetOverlappedResult GetProcAddress GetProcessHeap GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetTickCount64 HeapAlloc HeapCompact HeapCreate HeapDestroy HeapFree HeapReAlloc HeapSize HeapValidate InitializeCriticalSection InitializeSRWLock LeaveCriticalSection LoadLibraryW LocalFree LockFileEx MapViewOfFile MultiByteToWideChar OutputDebugStringA QueryPerformanceCounter ReadFile ReleaseSRWLockExclusive SetEndOfFile SetFilePointerEx SetUnhandledExceptionFilter Sleep TryAcquireSRWLockExclusive TryEnterCriticalSection UnlockFileEx UnmapViewOfFile VirtualProtect VirtualQuery WaitForSingleObject WaitForSingleObjectEx WideCharToMultiByte WriteFile

api-ms-win-crt-environment-l1-1-0

__p__environ

api-ms-win-crt-heap-l1-1-0

_set_new_mode free malloc realloc

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-private-l1-1-0

memchr memcmp memcpy memmove strchr strrchr

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _beginthreadex _cexit _configure_narrow_argv _crt_atexit _endthreadex _exit _initialize_narrow_environment _seh_filter_exe _initterm _initterm_e _set_app_type _set_invalid_parameter_handler abort exit

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf fflush setvbuf

api-ms-win-crt-string-l1-1-0

memset strcmp strcspn strlen strncmp strspn wcslen

api-ms-win-crt-time-l1-1-0

_gmtime64 _localtime64 _time64 strftime

shell32

SHGetFolderPathA

libstdc++-6

_ZNKSt14basic_ifstreamIcSt11char_traitsIcEE5rdbufEv _ZNKSt7__cxx1118basic_stringstreamIcSt11char_traitsIcESaIcEE3strEv _ZNSolsEPFRSt8ios_baseS0_E _ZNSolsEPSt15basic_streambufIcSt11char_traitsIcEE _ZNSolsEi _ZNSolsEy _ZNSt14basic_ifstreamIcSt11char_traitsIcEE5closeEv _ZNSt14basic_ifstreamIcSt11char_traitsIcEE7is_openEv _ZNSt14basic_ifstreamIcSt11char_traitsIcEEC1ERKNSt7__cxx1112basic_stringIcS1_SaIcEEESt13_Ios_Openmode _ZNSt14basic_ifstreamIcSt11char_traitsIcEED1Ev _ZNSt7__cxx1118basic_stringstreamIcSt11char_traitsIcESaIcEEC1Ev _ZNSt7__cxx1118basic_stringstreamIcSt11char_traitsIcESaIcEED1Ev _ZSt17__throw_bad_allocv _ZSt19__throw_logic_errorPKc _ZSt20__throw_length_errorPKc _ZSt21__glibcxx_assert_failPKciS0_S0_ _ZSt24__throw_out_of_range_fmtPKcz _ZSt28__throw_bad_array_new_lengthv _ZStlsISt11char_traitsIcEERSt13basic_ostreamIcT_ES5_PKc _ZStlsIcSt11char_traitsIcEERSt13basic_ostreamIT_T0_ES6_St5_Setw _ZStlsIcSt11char_traitsIcEERSt13basic_ostreamIT_T0_ES6_St8_SetfillIS3_E _ZStlsIcSt11char_traitsIcESaIcEERSt13basic_ostreamIT_T0_ES7_RKNSt7__cxx1112basic_stringIS4_S5_T1_EE _ZdlPvy _Znwy __cxa_begin_catch __cxa_end_catch __cxa_rethrow __gxx_personality_seh0

user32

ShowWindow

winhttp

WinHttpCloseHandle WinHttpConnect WinHttpCrackUrl WinHttpOpen WinHttpOpenRequest WinHttpReceiveResponse WinHttpSendRequest

Name

.text

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

64KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

36KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

37KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

800B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

BrowserDataCollector.exe

crypt32

libgcc_s_seh-1

kernel32

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

shell32

libstdc++-6

user32

winhttp

generic