Overview

overview

8

Static

static

2f0b2f513a...3b.exe

windows7-x64

8

2f0b2f513a...3b.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2f0b2f513afc76164056abdfec35639827645a732845866603d7debc949f533b

  • Size

    799KB

  • Sample

    221019-277etsced6

  • MD5

    9107a19a4c0004938f18d5465b318b90

  • SHA1

    4052a1bfe3f125cc65cba19c50d344de68f46a59

  • SHA256

    2f0b2f513afc76164056abdfec35639827645a732845866603d7debc949f533b

  • SHA512

    f6d0538cb260905efe088989ff4e1e900c8eacaa0dc6795d23ca75b0335fe723395d35d24ee1349cff3deab278f0ec284e847669d096c9c0b7f624ddb4f9f11e

  • SSDEEP

    24576:eeGM0l4wdPvNfhfePXrBuwM0aqKk/7gmpsWc:jGM+PvNpfKwYaZcgYy

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      2f0b2f513afc76164056abdfec35639827645a732845866603d7debc949f533b

    • Size

      799KB

    • MD5

      9107a19a4c0004938f18d5465b318b90

    • SHA1

      4052a1bfe3f125cc65cba19c50d344de68f46a59

    • SHA256

      2f0b2f513afc76164056abdfec35639827645a732845866603d7debc949f533b

    • SHA512

      f6d0538cb260905efe088989ff4e1e900c8eacaa0dc6795d23ca75b0335fe723395d35d24ee1349cff3deab278f0ec284e847669d096c9c0b7f624ddb4f9f11e

    • SSDEEP

      24576:eeGM0l4wdPvNfhfePXrBuwM0aqKk/7gmpsWc:jGM+PvNpfKwYaZcgYy

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks