Overview

overview

8

Static

static

bc75749654...30.exe

windows7-x64

8

bc75749654...30.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    bc75749654e6e2ec74613866a7d7a39d85d953e05a5e41f059bf1273513c6430

  • Size

    808KB

  • Sample

    221029-af8p2adedj

  • MD5

    00287d4c9fa4389ae5644493b3b5e5c2

  • SHA1

    2aa9f2010e5ca6559dbe46fe548bc206e79cfd1c

  • SHA256

    bc75749654e6e2ec74613866a7d7a39d85d953e05a5e41f059bf1273513c6430

  • SHA512

    989fde83efe2f9495cdbc49a505e23b191f91f36cf8f9c09ca04700c664a39716fbaef8a78833d1420542aeed7b6bb3afe5069db6f77b5e176bda2e34651e417

  • SSDEEP

    24576:pTd6zXpk9x50Ddnk3oY6C5L8zVuDlqfqj+q:pdOXm9DQVk3o25L8zVBy+q

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      bc75749654e6e2ec74613866a7d7a39d85d953e05a5e41f059bf1273513c6430

    • Size

      808KB

    • MD5

      00287d4c9fa4389ae5644493b3b5e5c2

    • SHA1

      2aa9f2010e5ca6559dbe46fe548bc206e79cfd1c

    • SHA256

      bc75749654e6e2ec74613866a7d7a39d85d953e05a5e41f059bf1273513c6430

    • SHA512

      989fde83efe2f9495cdbc49a505e23b191f91f36cf8f9c09ca04700c664a39716fbaef8a78833d1420542aeed7b6bb3afe5069db6f77b5e176bda2e34651e417

    • SSDEEP

      24576:pTd6zXpk9x50Ddnk3oY6C5L8zVuDlqfqj+q:pdOXm9DQVk3o25L8zVBy+q

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks