6bc5216211de169daa82030496e34b658ad2c34ec47be68b55de9730cb69ba2a | Triage

Sharing

General

Target

6bc5216211de169daa82030496e34b658ad2c34ec47be68b55de9730cb69ba2a
Size

773KB
Sample

221004-cbv99agcg7
MD5

2bc00885fb83c0133de0840a508271c0
SHA1

3129ee6845666227edd063a7baef1330f4025701
SHA256

6bc5216211de169daa82030496e34b658ad2c34ec47be68b55de9730cb69ba2a
SHA512

f390df3c991b1c3df21701a3f854e699935f8fe516a0712527110b31f5c16668033e87455368c448a73f2b517fdc2b2b15e9a1af0172e45a1defe21aeff1ad01
SSDEEP

12288:r6tahosp6l1L6TXuSEXAcCVKxF51Bn1yOMjDHXKUA7biyL8bj5EoQy9K1s3qaNT5:r6twosKjSfZVS5jQ6UKAHZ9K1WqaNi

Score

8^/10

discovery persistence spyware stealer upx

Malware Config

Targets

- Target
  
  6bc5216211de169daa82030496e34b658ad2c34ec47be68b55de9730cb69ba2a
- Size
  
  773KB
- MD5
  
  2bc00885fb83c0133de0840a508271c0
- SHA1
  
  3129ee6845666227edd063a7baef1330f4025701
- SHA256
  
  6bc5216211de169daa82030496e34b658ad2c34ec47be68b55de9730cb69ba2a
- SHA512
  
  f390df3c991b1c3df21701a3f854e699935f8fe516a0712527110b31f5c16668033e87455368c448a73f2b517fdc2b2b15e9a1af0172e45a1defe21aeff1ad01
- SSDEEP
  
  12288:r6tahosp6l1L6TXuSEXAcCVKxF51Bn1yOMjDHXKUA7biyL8bj5EoQy9K1s3qaNT5:r6twosKjSfZVS5jQ6UKAHZ9K1WqaNi
Score

8^/10

discovery persistence spyware stealer upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealerupx

behavioral2