Overview

overview

8

Static

static

3405fa4678...aa.exe

windows7-x64

8

3405fa4678...aa.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3405fa467886f9318810f0e563a1b5049ca243197f5eff33a30e29a1ff50faaa

  • Size

    1.0MB

  • Sample

    221001-yypa4sehfk

  • MD5

    6de1b81a4ed973d4a50df83554b57c80

  • SHA1

    c8b6d925d7f01eee2df84c78f1ff811bbd8d1657

  • SHA256

    3405fa467886f9318810f0e563a1b5049ca243197f5eff33a30e29a1ff50faaa

  • SHA512

    e34ea3ebb333b0d619c29dab7fc0852ad309d2ad723ed10e2dfe0209c3438596156289d11fc489efbcc9fb9e04872abc3d48bc33afe60ba870fea41ab6224558

  • SSDEEP

    24576:aE/x7wnYs1fyjtwljlKs7mn7mgnmndNWqc8qEcE:lI9y2hl57m7dmZsE

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      3405fa467886f9318810f0e563a1b5049ca243197f5eff33a30e29a1ff50faaa

    • Size

      1.0MB

    • MD5

      6de1b81a4ed973d4a50df83554b57c80

    • SHA1

      c8b6d925d7f01eee2df84c78f1ff811bbd8d1657

    • SHA256

      3405fa467886f9318810f0e563a1b5049ca243197f5eff33a30e29a1ff50faaa

    • SHA512

      e34ea3ebb333b0d619c29dab7fc0852ad309d2ad723ed10e2dfe0209c3438596156289d11fc489efbcc9fb9e04872abc3d48bc33afe60ba870fea41ab6224558

    • SSDEEP

      24576:aE/x7wnYs1fyjtwljlKs7mn7mgnmndNWqc8qEcE:lI9y2hl57m7dmZsE

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks