Overview

overview

10

Static

static

5673f19682...b9.exe

windows7-x64

10

5673f19682...b9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5673f19682b56a149fe319a37524d75d26b2b92650781b4fce895ed49d814fb9

  • Size

    185KB

  • Sample

    220725-dr5z3acfck

  • MD5

    b992fd6d5f64095b910fa3e31560f978

  • SHA1

    e238be6bb0f7fbe9cf8accf9eb0e7d90c495310a

  • SHA256

    5673f19682b56a149fe319a37524d75d26b2b92650781b4fce895ed49d814fb9

  • SHA512

    904caf88267da71381d5ca2cc8130d52c0bbf7652892f78157a1573d2e24b70e6673625effa346994653d5129c5a3297034f2532815bf84d639e9e51c81c2a14

Score
10/10
persistencespywarestealersuricataupx

Malware Config

Targets

    • Target

      5673f19682b56a149fe319a37524d75d26b2b92650781b4fce895ed49d814fb9

    • Size

      185KB

    • MD5

      b992fd6d5f64095b910fa3e31560f978

    • SHA1

      e238be6bb0f7fbe9cf8accf9eb0e7d90c495310a

    • SHA256

      5673f19682b56a149fe319a37524d75d26b2b92650781b4fce895ed49d814fb9

    • SHA512

      904caf88267da71381d5ca2cc8130d52c0bbf7652892f78157a1573d2e24b70e6673625effa346994653d5129c5a3297034f2532815bf84d639e9e51c81c2a14

    Score
    10/10
    persistencespywarestealersuricataupx

    • Modifies WinLogon for persistence

      persistence

    • suricata: ET MALWARE Kazy/Kryptor/Cycbot Trojan Checkin

      suricata: ET MALWARE Kazy/Kryptor/Cycbot Trojan Checkin

      suricata

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

1
T1004

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Credentials in Files

1
T1081

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks