c9f6c928806550149a8543614e8d657bd01dbc83ed4280a1e4bf78947ceb8e20 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9f6c928806550149a8543614e8d657bd01dbc83ed4280a1e4bf78947ceb8e20
Size

872KB
Sample

221004-aansnsdbe3
MD5

6eae2af4946fea0d0a32c635ef4bf8c0
SHA1

e504e48b3790dd48e4ad5b223cc087c2b04683f6
SHA256

c9f6c928806550149a8543614e8d657bd01dbc83ed4280a1e4bf78947ceb8e20
SHA512

de6e26ebbb1ccfa8befe887aba751d48633123d889513fe150910d218a68e346945fa4763cc86fca13d758ee107bae0f71b6cbe52809496da625982caae5a760
SSDEEP

24576:mF6hlZWVfFdl5YpZxmLHGug6aKolVc52X:G6hrmF6mLHGuxOQ52X

Score

8^/10

discovery persistence spyware stealer upx

Malware Config

Targets

- Target
  
  c9f6c928806550149a8543614e8d657bd01dbc83ed4280a1e4bf78947ceb8e20
- Size
  
  872KB
- MD5
  
  6eae2af4946fea0d0a32c635ef4bf8c0
- SHA1
  
  e504e48b3790dd48e4ad5b223cc087c2b04683f6
- SHA256
  
  c9f6c928806550149a8543614e8d657bd01dbc83ed4280a1e4bf78947ceb8e20
- SHA512
  
  de6e26ebbb1ccfa8befe887aba751d48633123d889513fe150910d218a68e346945fa4763cc86fca13d758ee107bae0f71b6cbe52809496da625982caae5a760
- SSDEEP
  
  24576:mF6hlZWVfFdl5YpZxmLHGug6aKolVc52X:G6hrmF6mLHGuxOQ52X
Score

8^/10

discovery persistence spyware stealer upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealerupx

behavioral2

discoverypersistenceupx