Overview

overview

8

Static

static

8

a041a42a0e...98.exe

windows7-x64

8

a041a42a0e...98.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a041a42a0e20dad766d9e832fe857bbb936db070adb5ffba636b29d6a4181c98

  • Size

    166KB

  • Sample

    221030-3lqqmafghj

  • MD5

    91b1e654710732eccd11980675d1c041

  • SHA1

    50ec91f716c0266f6a29f3f2677d763549546e50

  • SHA256

    a041a42a0e20dad766d9e832fe857bbb936db070adb5ffba636b29d6a4181c98

  • SHA512

    4a27dfc400f8ac03caedb6d0da204508693f354729d95048f684a1613d65d950debc6611ddd61edfce7c033e781cb8b5d76ab6ea82f49d539544bfa1aaf24871

  • SSDEEP

    3072:2Z1dkv4lIrZePbp2R+lEGVqBayszFaL8E13MswO9mpJoe7XMk3nngVByM:2vTp2R+lE8qYys3E133wG7erMkXgiM

Score
8/10
spywarestealerupx

Malware Config

Targets

    • Target

      a041a42a0e20dad766d9e832fe857bbb936db070adb5ffba636b29d6a4181c98

    • Size

      166KB

    • MD5

      91b1e654710732eccd11980675d1c041

    • SHA1

      50ec91f716c0266f6a29f3f2677d763549546e50

    • SHA256

      a041a42a0e20dad766d9e832fe857bbb936db070adb5ffba636b29d6a4181c98

    • SHA512

      4a27dfc400f8ac03caedb6d0da204508693f354729d95048f684a1613d65d950debc6611ddd61edfce7c033e781cb8b5d76ab6ea82f49d539544bfa1aaf24871

    • SSDEEP

      3072:2Z1dkv4lIrZePbp2R+lEGVqBayszFaL8E13MswO9mpJoe7XMk3nngVByM:2vTp2R+lE8qYys3E133wG7erMkXgiM

    Score
    8/10
    upxspywarestealer

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks