Overview

overview

9

Static

static

1b078a29f2...e6.exe

windows7-x64

9

1b078a29f2...e6.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    1b078a29f2bc5590a7be99a80fe45ea416cd0d3454e7360a81333c620dc6afe6

  • Size

    476KB

  • Sample

    221029-y6xmfseddl

  • MD5

    a3a1332b630f095d5822cfdf1404d164

  • SHA1

    77de5c6b5d28a1ba2985de5a545f3db8cec63e7f

  • SHA256

    1b078a29f2bc5590a7be99a80fe45ea416cd0d3454e7360a81333c620dc6afe6

  • SHA512

    0bfc54ba07b5f8cceeee549a578728708c85a2864038725f0d580b5df1e7d3097c257e8afe0399f8041c84ca6ef3d15767bed6026f40b47f6121f857a27a0ad5

  • SSDEEP

    6144:Uq7z5CLFE5QNB4Y7oVXza+z8R19wwTWH6QTZUQVXN33g9YDqxtpxH:Uy5CLFE5QNKY7OXmVeaWUYXdEYA

Score
9/10
spywarestealerupx

Malware Config

Targets

    • Target

      1b078a29f2bc5590a7be99a80fe45ea416cd0d3454e7360a81333c620dc6afe6

    • Size

      476KB

    • MD5

      a3a1332b630f095d5822cfdf1404d164

    • SHA1

      77de5c6b5d28a1ba2985de5a545f3db8cec63e7f

    • SHA256

      1b078a29f2bc5590a7be99a80fe45ea416cd0d3454e7360a81333c620dc6afe6

    • SHA512

      0bfc54ba07b5f8cceeee549a578728708c85a2864038725f0d580b5df1e7d3097c257e8afe0399f8041c84ca6ef3d15767bed6026f40b47f6121f857a27a0ad5

    • SSDEEP

      6144:Uq7z5CLFE5QNB4Y7oVXza+z8R19wwTWH6QTZUQVXN33g9YDqxtpxH:Uy5CLFE5QNKY7OXmVeaWUYXdEYA

    Score
    9/10
    spywarestealerupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks