Overview

overview

8

Static

static

8

9f35d284af...d6.exe

windows7-x64

8

Resubmissions

14-09-2022 13:40

220914-qyhvbsebfq 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9f35d284afd3dafb2ab44e4a09ec7ef7cb62574282edf847d8deb7e450665bd6.exe

  • Size

    4.4MB

  • Sample

    220914-qyhvbsebfq

  • MD5

    f155ec35d67f746593ce8cc4e64d33e5

  • SHA1

    822e0997e6c6d577a7803018dedba01a5ec70dc3

  • SHA256

    9f35d284afd3dafb2ab44e4a09ec7ef7cb62574282edf847d8deb7e450665bd6

  • SHA512

    ed5d2470defa3ecb8cdcdfb6b315ed921ac0719b1a08099f646208770f365866b13e2687dea21f25598d858885d54dd62b60ccefc5c45080bc4ccd6bbc923021

  • SSDEEP

    49152:Jhe0zWNgw7dO4TdK8po/xQPMIevzsdzlCI6aSjJzeP8E6YuSi33fjk77QXpe2Pp/:DahOmIZcevzRIuePPTuLZpzz

Score
8/10
ransomwarespywarestealerupx

Malware Config

Targets

    • Target

      9f35d284afd3dafb2ab44e4a09ec7ef7cb62574282edf847d8deb7e450665bd6.exe

    • Size

      4.4MB

    • MD5

      f155ec35d67f746593ce8cc4e64d33e5

    • SHA1

      822e0997e6c6d577a7803018dedba01a5ec70dc3

    • SHA256

      9f35d284afd3dafb2ab44e4a09ec7ef7cb62574282edf847d8deb7e450665bd6

    • SHA512

      ed5d2470defa3ecb8cdcdfb6b315ed921ac0719b1a08099f646208770f365866b13e2687dea21f25598d858885d54dd62b60ccefc5c45080bc4ccd6bbc923021

    • SSDEEP

      49152:Jhe0zWNgw7dO4TdK8po/xQPMIevzsdzlCI6aSjJzeP8E6YuSi33fjk77QXpe2Pp/:DahOmIZcevzRIuePPTuLZpzz

    Score
    8/10
    ransomwarespywarestealerupx

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops startup file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops desktop.ini file(s)

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks