Overview

overview

8

Static

static

538d7c71c3...11.exe

windows7-x64

8

538d7c71c3...11.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    538d7c71c38c463082f4ebd81ad71ca9589217dfaaa2ce61a659b65a2a93cc11

  • Size

    799KB

  • Sample

    221004-chp2tagfa4

  • MD5

    35c79a63f38250f3eb36369afe0aa940

  • SHA1

    cc7bf54c7c0bbfb78872c9935b079d91e5a92c4a

  • SHA256

    538d7c71c38c463082f4ebd81ad71ca9589217dfaaa2ce61a659b65a2a93cc11

  • SHA512

    f42b9813be67dc9c298ac13e7a46869d1a360329a374998eb5b78a3b56efc8e11a090ea4a18dfa86f46d1182b5f9fd8c59428ce4933ac55abd4dcc1db3da877b

  • SSDEEP

    12288:Kn+rQxzgnk2kZa8yl45bN9QNpGmNEF5CKPKJjSKlEJcnbnrENY1VKzi/B9Oatkwj:trQxzYkbFnWGmadK5R7INY+jSkx2u

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      538d7c71c38c463082f4ebd81ad71ca9589217dfaaa2ce61a659b65a2a93cc11

    • Size

      799KB

    • MD5

      35c79a63f38250f3eb36369afe0aa940

    • SHA1

      cc7bf54c7c0bbfb78872c9935b079d91e5a92c4a

    • SHA256

      538d7c71c38c463082f4ebd81ad71ca9589217dfaaa2ce61a659b65a2a93cc11

    • SHA512

      f42b9813be67dc9c298ac13e7a46869d1a360329a374998eb5b78a3b56efc8e11a090ea4a18dfa86f46d1182b5f9fd8c59428ce4933ac55abd4dcc1db3da877b

    • SSDEEP

      12288:Kn+rQxzgnk2kZa8yl45bN9QNpGmNEF5CKPKJjSKlEJcnbnrENY1VKzi/B9Oatkwj:trQxzYkbFnWGmadK5R7INY+jSkx2u

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks