177e63499db44139d10bd04f269747b2859135c4725588ee90cd87a5a52be17d | Triage

Sharing

General

Target

177e63499db44139d10bd04f269747b2859135c4725588ee90cd87a5a52be17d
Size

832KB
Sample

221011-j7c7waeaal
MD5

6284e87f200d48d475ede867f4bf1c90
SHA1

77a18062e56eb4ec752f648404ca230c503f0bff
SHA256

177e63499db44139d10bd04f269747b2859135c4725588ee90cd87a5a52be17d
SHA512

c8b54d50f1d240ee676580ee913d2f518aadc476c1d6ac106ef3dc85f2eb75c4de8ff69be5d5f76f03d175237ba503d7bccf6c5a9d0065fd907739069dcff00b
SSDEEP

12288:HEB5WWX+kce5S3kmez5TIObOlvRoM3SNY/bqeIRJn7J3vXmBKdVnFCQzT53iXoP8:kB5ykIUgaGSNMhIf7VJtkepiXoPHp

Score

8^/10

discovery persistence spyware stealer upx

Malware Config

Targets

- Target
  
  177e63499db44139d10bd04f269747b2859135c4725588ee90cd87a5a52be17d
- Size
  
  832KB
- MD5
  
  6284e87f200d48d475ede867f4bf1c90
- SHA1
  
  77a18062e56eb4ec752f648404ca230c503f0bff
- SHA256
  
  177e63499db44139d10bd04f269747b2859135c4725588ee90cd87a5a52be17d
- SHA512
  
  c8b54d50f1d240ee676580ee913d2f518aadc476c1d6ac106ef3dc85f2eb75c4de8ff69be5d5f76f03d175237ba503d7bccf6c5a9d0065fd907739069dcff00b
- SSDEEP
  
  12288:HEB5WWX+kce5S3kmez5TIObOlvRoM3SNY/bqeIRJn7J3vXmBKdVnFCQzT53iXoP8:kB5ykIUgaGSNMhIf7VJtkepiXoPHp
Score

8^/10

discovery persistence spyware stealer upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealerupx

behavioral2