a6ecab95a9dee70ccf1f5a295c05c28d73e98ae6bfdef65bab0972473e6fec55 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6ecab95a9dee70ccf1f5a295c05c28d73e98ae6bfdef65bab0972473e6fec55
Size

169KB
Sample

221011-k79frafgfj
MD5

78cceba3d848c5ee1844e30241c88ee0
SHA1

238adfe04ad6508229dd80d74af83c7b01b689de
SHA256

a6ecab95a9dee70ccf1f5a295c05c28d73e98ae6bfdef65bab0972473e6fec55
SHA512

0ab544b348dbd1ee8370bdcdaf0d24fffa974ae14b86a7694fa5dffc1b2b171d8ce23ffc64fc791b6a5fe40e6b3448e8afe10ed411489774a2b9d33eb2f8314a
SSDEEP

3072:y2TzuERB6eeEir8/GREAkbaVUMb+OeVzD9fDVrGOoPi65I4bSzA0o7nWj5:VTz9OeenMlnMUMb+3jGOGi6HSzARny

Score

10^/10

persistence spyware stealer upx

Malware Config

Targets

- Target
  
  a6ecab95a9dee70ccf1f5a295c05c28d73e98ae6bfdef65bab0972473e6fec55
- Size
  
  169KB
- MD5
  
  78cceba3d848c5ee1844e30241c88ee0
- SHA1
  
  238adfe04ad6508229dd80d74af83c7b01b689de
- SHA256
  
  a6ecab95a9dee70ccf1f5a295c05c28d73e98ae6bfdef65bab0972473e6fec55
- SHA512
  
  0ab544b348dbd1ee8370bdcdaf0d24fffa974ae14b86a7694fa5dffc1b2b171d8ce23ffc64fc791b6a5fe40e6b3448e8afe10ed411489774a2b9d33eb2f8314a
- SSDEEP
  
  3072:y2TzuERB6eeEir8/GREAkbaVUMb+OeVzD9fDVrGOoPi65I4bSzA0o7nWj5:VTz9OeenMlnMUMb+3jGOGi6HSzARny
Score

10^/10

persistence spyware stealer upx
- Modifies WinLogon for persistence
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealerupx

behavioral2