Overview

overview

8

Static

static

e5deccbda3...bf.exe

windows7-x64

8

e5deccbda3...bf.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    e5deccbda3340cd7e0a815d455938f91aedfd08615cc57d506ceecb652a707bf

  • Size

    1.0MB

  • Sample

    221003-2lmhjaafbn

  • MD5

    01b88564ead2ec9f5e2289b52d99c095

  • SHA1

    b0d52c0aab20e6736323b32ab29b4284f718a825

  • SHA256

    e5deccbda3340cd7e0a815d455938f91aedfd08615cc57d506ceecb652a707bf

  • SHA512

    40a1723581f6610e130c5c873d5072b6616d95b845d65c051289d38a510f09f9a450aa0ef9638597ebdb8e5f405c2bef424c927e50cb6612e2c60cbbb943a485

  • SSDEEP

    24576:X9kRhp0I4r/13xxw1hWsypXQoPR1FklOJjyP2eRoKiu6Ib:CRhGVrw8sypvfFklOJyPhLr

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      e5deccbda3340cd7e0a815d455938f91aedfd08615cc57d506ceecb652a707bf

    • Size

      1.0MB

    • MD5

      01b88564ead2ec9f5e2289b52d99c095

    • SHA1

      b0d52c0aab20e6736323b32ab29b4284f718a825

    • SHA256

      e5deccbda3340cd7e0a815d455938f91aedfd08615cc57d506ceecb652a707bf

    • SHA512

      40a1723581f6610e130c5c873d5072b6616d95b845d65c051289d38a510f09f9a450aa0ef9638597ebdb8e5f405c2bef424c927e50cb6612e2c60cbbb943a485

    • SSDEEP

      24576:X9kRhp0I4r/13xxw1hWsypXQoPR1FklOJjyP2eRoKiu6Ib:CRhGVrw8sypvfFklOJyPhLr

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks