Overview

overview

8

Static

static

5cd9df1fdc...bb.exe

windows7-x64

8

5cd9df1fdc...bb.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    5cd9df1fdc2c62508ad7d9aa67cdf31b5779174334a01229050f553d610822bb

  • Size

    800KB

  • Sample

    221030-p64akacdgq

  • MD5

    93a272c541a560657ed60b4e97279650

  • SHA1

    dfa55ed40a02f403d28fa0a948d192e0db4207fe

  • SHA256

    5cd9df1fdc2c62508ad7d9aa67cdf31b5779174334a01229050f553d610822bb

  • SHA512

    0dfefd6a2db5f04615ccc313c43d9678b690193d3c369bfdecf95ed0a7658a30c50046af19621ec840f5c1eb89afe0c8bec1c81861c56280432bec0f042a7138

  • SSDEEP

    12288:0yQA48IBGcwtgT+seLki1ozgfXFVOs/QQRLM43tAlnwmSaTjSbGXZyJPjdP:0yQrDT+HLTxXFEERLMa4SaTeGpyp

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      5cd9df1fdc2c62508ad7d9aa67cdf31b5779174334a01229050f553d610822bb

    • Size

      800KB

    • MD5

      93a272c541a560657ed60b4e97279650

    • SHA1

      dfa55ed40a02f403d28fa0a948d192e0db4207fe

    • SHA256

      5cd9df1fdc2c62508ad7d9aa67cdf31b5779174334a01229050f553d610822bb

    • SHA512

      0dfefd6a2db5f04615ccc313c43d9678b690193d3c369bfdecf95ed0a7658a30c50046af19621ec840f5c1eb89afe0c8bec1c81861c56280432bec0f042a7138

    • SSDEEP

      12288:0yQA48IBGcwtgT+seLki1ozgfXFVOs/QQRLM43tAlnwmSaTjSbGXZyJPjdP:0yQrDT+HLTxXFEERLMa4SaTeGpyp

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks