Overview

overview

8

Static

static

d6f914e2c7...1d.exe

windows7-x64

8

d6f914e2c7...1d.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    d6f914e2c76a75f98d53fc23808e396254b717891ab45bb02d232f472d6f7e1d

  • Size

    800KB

  • Sample

    221030-n4242safek

  • MD5

    842991775ddcbd00f9ecc514c5e2db20

  • SHA1

    fb8f5196f294f6ac8f92bb540e968b85127e781b

  • SHA256

    d6f914e2c76a75f98d53fc23808e396254b717891ab45bb02d232f472d6f7e1d

  • SHA512

    18e41f7cfdf9dce00862d8bbbd38c79ef342d5ea0d6ec9c4c87c0ef3074a27aa57cee182a923d4ae9918ca21f1a27c1a3aec2c4b4ba845a59c93a34d85379148

  • SSDEEP

    24576:SoDIll40LE4nuMCVLCMCoEJ73UpaBcMFRsAS1M/HEqg:5DI494nZJ0Y1QAS1Me

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      d6f914e2c76a75f98d53fc23808e396254b717891ab45bb02d232f472d6f7e1d

    • Size

      800KB

    • MD5

      842991775ddcbd00f9ecc514c5e2db20

    • SHA1

      fb8f5196f294f6ac8f92bb540e968b85127e781b

    • SHA256

      d6f914e2c76a75f98d53fc23808e396254b717891ab45bb02d232f472d6f7e1d

    • SHA512

      18e41f7cfdf9dce00862d8bbbd38c79ef342d5ea0d6ec9c4c87c0ef3074a27aa57cee182a923d4ae9918ca21f1a27c1a3aec2c4b4ba845a59c93a34d85379148

    • SSDEEP

      24576:SoDIll40LE4nuMCVLCMCoEJ73UpaBcMFRsAS1M/HEqg:5DI494nZJ0Y1QAS1Me

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks