3e8776f2ee93fc2f21af9e964d74d00867e19a3bc3ca258c20aa926a3ef383c1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e8776f2ee93fc2f21af9e964d74d00867e19a3bc3ca258c20aa926a3ef383c1
Size

823KB
Sample

221107-kp3v9ageg4
MD5

0c82a6675558eb6954c0321ef5f9a366
SHA1

9377e5fdec0717719fede294e983f98d68549068
SHA256

3e8776f2ee93fc2f21af9e964d74d00867e19a3bc3ca258c20aa926a3ef383c1
SHA512

961c7c7eccfa1a0ff0236aa92496136b07d9e4bc5af848f386686e8c1d7b6b78e4b45b5ede41a4f215faf852e478690086f17bedaeed6996fec1a776c744b5fa
SSDEEP

24576:HYi+bqZlr6Ps/zWexgSDyLbpMbaweknRijLW:4JbaisrtOLbpM2weknR0W

Score

8^/10

discovery persistence spyware stealer upx

Malware Config

Targets

- Target
  
  3e8776f2ee93fc2f21af9e964d74d00867e19a3bc3ca258c20aa926a3ef383c1
- Size
  
  823KB
- MD5
  
  0c82a6675558eb6954c0321ef5f9a366
- SHA1
  
  9377e5fdec0717719fede294e983f98d68549068
- SHA256
  
  3e8776f2ee93fc2f21af9e964d74d00867e19a3bc3ca258c20aa926a3ef383c1
- SHA512
  
  961c7c7eccfa1a0ff0236aa92496136b07d9e4bc5af848f386686e8c1d7b6b78e4b45b5ede41a4f215faf852e478690086f17bedaeed6996fec1a776c744b5fa
- SSDEEP
  
  24576:HYi+bqZlr6Ps/zWexgSDyLbpMbaweknRijLW:4JbaisrtOLbpM2weknR0W
Score

8^/10

discovery persistence spyware stealer upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealerupx

behavioral2