Overview

overview

8

Static

static

cafaf1e747...23.exe

windows7_x64

8

cafaf1e747...23.exe

windows10_x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    cafaf1e747e3796278e4675c6bb57b23.exe
  • Size 1.6MB
  • Sample220131-dtmlhaebhq
  • SHA256 3c750d7eaa45aea07cd60993c0652ff9fe04b0fee8932e117945191a3fd76914
  • MD5 SHA1 SHA512
Score
8/10
spywarestealerupx

Malware Config

Targets

    • Target
      cafaf1e747e3796278e4675c6bb57b23.exe
    • Size 1.6MB
    • SHA256 3c750d7eaa45aea07cd60993c0652ff9fe04b0fee8932e117945191a3fd76914
    • MD5 SHA1 SHA512
    Score
    8/10
    spywarestealerupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks