Overview

overview

8

Static

static

c66f9af53c...68.exe

windows7-x64

8

c66f9af53c...68.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    c66f9af53c2123291d760719728f514551208c844b7925e9bdd7a0fe430baa68

  • Size

    799KB

  • Sample

    221030-vt57aaceej

  • MD5

    82c48f2df310619aae19c01f48febdb0

  • SHA1

    85555953971dcaf9ef9326b3a99fc2e7c56cac79

  • SHA256

    c66f9af53c2123291d760719728f514551208c844b7925e9bdd7a0fe430baa68

  • SHA512

    120b3a1e542e313a8e87dcb514f46a62d9681b16df0f7b2810606faa4217dcc9dd8d398e3ea71deb44dc56971606461bccc00487b3f8ad9f79652f2e014713cd

  • SSDEEP

    12288:1Do4e1Xtml72L1AACZnA6rvi7CEo2DbI6v+F8YsvuX30cJLf7Ua7fJTJ:dMXtW2L+DXi7CNk2F8Y2uX5U4

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      c66f9af53c2123291d760719728f514551208c844b7925e9bdd7a0fe430baa68

    • Size

      799KB

    • MD5

      82c48f2df310619aae19c01f48febdb0

    • SHA1

      85555953971dcaf9ef9326b3a99fc2e7c56cac79

    • SHA256

      c66f9af53c2123291d760719728f514551208c844b7925e9bdd7a0fe430baa68

    • SHA512

      120b3a1e542e313a8e87dcb514f46a62d9681b16df0f7b2810606faa4217dcc9dd8d398e3ea71deb44dc56971606461bccc00487b3f8ad9f79652f2e014713cd

    • SSDEEP

      12288:1Do4e1Xtml72L1AACZnA6rvi7CEo2DbI6v+F8YsvuX30cJLf7Ua7fJTJ:dMXtW2L+DXi7CNk2F8Y2uX5U4

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks