Overview

overview

8

Static

static

d3c3b67a16...1a.exe

windows7-x64

8

d3c3b67a16...1a.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    d3c3b67a1690b3a9066e9e3bee674b64b2f7fbbea421d65e41a469bd949b791a

  • Size

    799KB

  • Sample

    221030-n53rzahgg4

  • MD5

    51e5f556702b9960becfc39d957ff370

  • SHA1

    ce6f50c62723f6f92a702f37d9c822026555c2f2

  • SHA256

    d3c3b67a1690b3a9066e9e3bee674b64b2f7fbbea421d65e41a469bd949b791a

  • SHA512

    d2b7b66cc15d9b9af7d7e87c9df9beb2459cdf9765f3d678ca322ffe212eaca1afe78577bb58ac980930515fca030a2f3ba03bb04efa08bae55e4c6ccd722dc6

  • SSDEEP

    12288:IRvKFCNf/BKUJDOiyEZDZarszsQB+28BihBnFkqXJzYfy1KJ4V8ut:UvzYUJDAW6qf6iJpYfy1DV

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      d3c3b67a1690b3a9066e9e3bee674b64b2f7fbbea421d65e41a469bd949b791a

    • Size

      799KB

    • MD5

      51e5f556702b9960becfc39d957ff370

    • SHA1

      ce6f50c62723f6f92a702f37d9c822026555c2f2

    • SHA256

      d3c3b67a1690b3a9066e9e3bee674b64b2f7fbbea421d65e41a469bd949b791a

    • SHA512

      d2b7b66cc15d9b9af7d7e87c9df9beb2459cdf9765f3d678ca322ffe212eaca1afe78577bb58ac980930515fca030a2f3ba03bb04efa08bae55e4c6ccd722dc6

    • SSDEEP

      12288:IRvKFCNf/BKUJDOiyEZDZarszsQB+28BihBnFkqXJzYfy1KJ4V8ut:UvzYUJDAW6qf6iJpYfy1DV

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks