ce5e30ed5418c756f9046f8d34ad824e7ed5701d2c35564096ce69b7a24021d1 | Triage

Sharing

General

Target

ce5e30ed5418c756f9046f8d34ad824e7ed5701d2c35564096ce69b7a24021d1
Size

1.0MB
Sample

221030-hr6c2shebl
MD5

a3a2fe0b9c8b1bc34368dac17a4adaa0
SHA1

541f3c9ccba851ec0623b87d3d30d8077bdc8de2
SHA256

ce5e30ed5418c756f9046f8d34ad824e7ed5701d2c35564096ce69b7a24021d1
SHA512

80a07f7faf3b151104ddda256189dd82728c3a5d21c7aed92dc7257c2a62ce4c8d0d5542ee1daf0a61cf6e30c615f9e7c01985d8bfbeb6bf29aa7700321100c4
SSDEEP

12288:j/DzqEDeWxVnfcSh2vUYzQNCjdxjIvb1y0bSQQ6M4YPqYv/V5cFKutKlfESware/:MWxpHhFbA0boh4LYvNiKPELVuAWumL+

Score

8^/10

discovery persistence spyware stealer upx

Malware Config

Targets

- Target
  
  ce5e30ed5418c756f9046f8d34ad824e7ed5701d2c35564096ce69b7a24021d1
- Size
  
  1.0MB
- MD5
  
  a3a2fe0b9c8b1bc34368dac17a4adaa0
- SHA1
  
  541f3c9ccba851ec0623b87d3d30d8077bdc8de2
- SHA256
  
  ce5e30ed5418c756f9046f8d34ad824e7ed5701d2c35564096ce69b7a24021d1
- SHA512
  
  80a07f7faf3b151104ddda256189dd82728c3a5d21c7aed92dc7257c2a62ce4c8d0d5542ee1daf0a61cf6e30c615f9e7c01985d8bfbeb6bf29aa7700321100c4
- SSDEEP
  
  12288:j/DzqEDeWxVnfcSh2vUYzQNCjdxjIvb1y0bSQQ6M4YPqYv/V5cFKutKlfESware/:MWxpHhFbA0boh4LYvNiKPELVuAWumL+
Score

8^/10

discovery persistence spyware stealer upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealerupx

behavioral2