Overview

overview

8

Static

static

db25589051...50.exe

windows7-x64

8

db25589051...50.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    db25589051ddb1965933ff10b8c19cd2ca05b640d10ff03c37b74c6e36dd1650

  • Size

    782KB

  • Sample

    221011-v551nafga3

  • MD5

    633429fee3cb57e635194b6230a7ec50

  • SHA1

    f934dbe9aac544684affd75d71da8177fa2f9015

  • SHA256

    db25589051ddb1965933ff10b8c19cd2ca05b640d10ff03c37b74c6e36dd1650

  • SHA512

    15fd2414a0ec1f13b3b806e160f2cd5659cec1e35d56474f9f78d509ebc6e96594edcb3db8a38e4b3e3ebaf2eb5eb25edb27faa2ba53b2e685c87f4252b13fd4

  • SSDEEP

    12288:lDCACrKt/Cth2VV4ewIzbhLLaDLKSX1Q5dWSjYpADqyzJrOVKu4LySalr7vx0cwT:lI3E4xebRL7SXGWSmAT6Ku4LHal/mPFb

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      db25589051ddb1965933ff10b8c19cd2ca05b640d10ff03c37b74c6e36dd1650

    • Size

      782KB

    • MD5

      633429fee3cb57e635194b6230a7ec50

    • SHA1

      f934dbe9aac544684affd75d71da8177fa2f9015

    • SHA256

      db25589051ddb1965933ff10b8c19cd2ca05b640d10ff03c37b74c6e36dd1650

    • SHA512

      15fd2414a0ec1f13b3b806e160f2cd5659cec1e35d56474f9f78d509ebc6e96594edcb3db8a38e4b3e3ebaf2eb5eb25edb27faa2ba53b2e685c87f4252b13fd4

    • SSDEEP

      12288:lDCACrKt/Cth2VV4ewIzbhLLaDLKSX1Q5dWSjYpADqyzJrOVKu4LySalr7vx0cwT:lI3E4xebRL7SXGWSmAT6Ku4LHal/mPFb

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks