Overview

overview

8

Static

static

78f987c419...51.exe

windows7-x64

8

78f987c419...51.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    78f987c4196ed3d34d8966f8b53adadf852443d20979b0ad43062526eb67e951

  • Size

    830KB

  • Sample

    221028-3cvcfscbcm

  • MD5

    0af4307be0cd76cf50af5e5a84607016

  • SHA1

    0a6625aa6c27a1b5e40261a482c05cacf23a0b8d

  • SHA256

    78f987c4196ed3d34d8966f8b53adadf852443d20979b0ad43062526eb67e951

  • SHA512

    e59ea76c2ed6d0b182e8e5b3bdd9498eba6cb2371ae0dd74ba8da18a7c13e15ed26e96644275bf2959da0bd52e0c64891ebdfc7fb8abac566d436fc6a511896e

  • SSDEEP

    12288:hZEGY6IEBqtw9yXyaU4v+mrSIaC0cAKRWo+uZiWLyE8c9MU1a8uKeBIhXv5CwSy0:UAQyub9reuWr/WW9wM2a8e2XvMfy

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      78f987c4196ed3d34d8966f8b53adadf852443d20979b0ad43062526eb67e951

    • Size

      830KB

    • MD5

      0af4307be0cd76cf50af5e5a84607016

    • SHA1

      0a6625aa6c27a1b5e40261a482c05cacf23a0b8d

    • SHA256

      78f987c4196ed3d34d8966f8b53adadf852443d20979b0ad43062526eb67e951

    • SHA512

      e59ea76c2ed6d0b182e8e5b3bdd9498eba6cb2371ae0dd74ba8da18a7c13e15ed26e96644275bf2959da0bd52e0c64891ebdfc7fb8abac566d436fc6a511896e

    • SSDEEP

      12288:hZEGY6IEBqtw9yXyaU4v+mrSIaC0cAKRWo+uZiWLyE8c9MU1a8uKeBIhXv5CwSy0:UAQyub9reuWr/WW9wM2a8e2XvMfy

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks