Overview

overview

8

Static

static

b30c823f3c...fa.exe

windows7-x64

8

b30c823f3c...fa.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    b30c823f3c50910b068a604d1904a4b7c9b8b0e9eb225da91522c39b6e9716fa

  • Size

    831KB

  • Sample

    221020-j56readaem

  • MD5

    77385e5d0c2aeff524180d44025faa20

  • SHA1

    e9951de670a47473ebb95963340376ca7cee2c0b

  • SHA256

    b30c823f3c50910b068a604d1904a4b7c9b8b0e9eb225da91522c39b6e9716fa

  • SHA512

    bd2c0454224bc129770454a9074cd2d2b0f8422f0121cc4595326d4aff2eb7931572eb4a80eee728d16184faa51cdb0dab723b7d176e10f70c7bb1d5a8bb5679

  • SSDEEP

    24576:LdP35tm/oO3k5cHZCogYeZcu0xLJzKh4tL/+:pfg61YWc7LJh

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      b30c823f3c50910b068a604d1904a4b7c9b8b0e9eb225da91522c39b6e9716fa

    • Size

      831KB

    • MD5

      77385e5d0c2aeff524180d44025faa20

    • SHA1

      e9951de670a47473ebb95963340376ca7cee2c0b

    • SHA256

      b30c823f3c50910b068a604d1904a4b7c9b8b0e9eb225da91522c39b6e9716fa

    • SHA512

      bd2c0454224bc129770454a9074cd2d2b0f8422f0121cc4595326d4aff2eb7931572eb4a80eee728d16184faa51cdb0dab723b7d176e10f70c7bb1d5a8bb5679

    • SSDEEP

      24576:LdP35tm/oO3k5cHZCogYeZcu0xLJzKh4tL/+:pfg61YWc7LJh

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks