Overview

overview

8

Static

static

20afe13f25...c6.exe

windows7-x64

8

20afe13f25...c6.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    20afe13f25008fa5cc96d4d43eb3eedebf87f1f5cde3634c4162add381201dc6

  • Size

    646KB

  • Sample

    221020-z5axqsehej

  • MD5

    96cae2d3ae2e92a2bdfc73b1cfd03979

  • SHA1

    c1964de6cd5f0d46da25c07c7db83700417277cd

  • SHA256

    20afe13f25008fa5cc96d4d43eb3eedebf87f1f5cde3634c4162add381201dc6

  • SHA512

    3a3d0a3802b2165dd536bb27dbbcd30a316cf1b454c8b4cc0b376e984cf7dc1985b03d19b8c1915b2196d928f04a96353a3a454c0a439fa19bc21a374c1bab95

  • SSDEEP

    12288:EfUhkhVED0dFBIea71NFmKY1eflPjA2mCO/FIavvzV9ZQzb:E8h9DgIeiEK7RjAb/z7V3Qzb

Score
8/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      20afe13f25008fa5cc96d4d43eb3eedebf87f1f5cde3634c4162add381201dc6

    • Size

      646KB

    • MD5

      96cae2d3ae2e92a2bdfc73b1cfd03979

    • SHA1

      c1964de6cd5f0d46da25c07c7db83700417277cd

    • SHA256

      20afe13f25008fa5cc96d4d43eb3eedebf87f1f5cde3634c4162add381201dc6

    • SHA512

      3a3d0a3802b2165dd536bb27dbbcd30a316cf1b454c8b4cc0b376e984cf7dc1985b03d19b8c1915b2196d928f04a96353a3a454c0a439fa19bc21a374c1bab95

    • SSDEEP

      12288:EfUhkhVED0dFBIea71NFmKY1eflPjA2mCO/FIavvzV9ZQzb:E8h9DgIeiEK7RjAb/z7V3Qzb

    Score
    8/10
    persistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks