Overview

overview

8

Static

static

8

6a1823a19d...12.exe

windows7-x64

8

6a1823a19d...12.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    6a1823a19d7b1ce24562f3e90e77b556ed55fb76681eecc27ecb916aa85df712

  • Size

    59KB

  • Sample

    221030-d2hbraaeb9

  • MD5

    a25fc7a340dbb1888b9794fe0533a970

  • SHA1

    fe80028d79494c2b508b36f50e442ea9c2e3f397

  • SHA256

    6a1823a19d7b1ce24562f3e90e77b556ed55fb76681eecc27ecb916aa85df712

  • SHA512

    65a1b3d01132eddae951db71a9ffa6fff9d942055ecd7f16cb94e76d74bf04739d25d058a9077ecb3d7fcfc23a1bee550fd51e7efdb06e34cf65288650afb2d6

  • SSDEEP

    768:MCMFODQJxQluOCbk75+LDwal3JOS6B5D3DUgc1mVd5DSEgn3A:IFOD2qluOCYKwVBx3wgcwdlg3A

Score
8/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      6a1823a19d7b1ce24562f3e90e77b556ed55fb76681eecc27ecb916aa85df712

    • Size

      59KB

    • MD5

      a25fc7a340dbb1888b9794fe0533a970

    • SHA1

      fe80028d79494c2b508b36f50e442ea9c2e3f397

    • SHA256

      6a1823a19d7b1ce24562f3e90e77b556ed55fb76681eecc27ecb916aa85df712

    • SHA512

      65a1b3d01132eddae951db71a9ffa6fff9d942055ecd7f16cb94e76d74bf04739d25d058a9077ecb3d7fcfc23a1bee550fd51e7efdb06e34cf65288650afb2d6

    • SSDEEP

      768:MCMFODQJxQluOCbk75+LDwal3JOS6B5D3DUgc1mVd5DSEgn3A:IFOD2qluOCYKwVBx3wgcwdlg3A

    Score
    8/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks