622a77050e11045b7d7401c8f07a6c3441a7b25a8ac821002f16905c0b4741cc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

622a77050e11045b7d7401c8f07a6c3441a7b25a8ac821002f16905c0b4741cc
Size

816KB
Sample

221107-tcwqvaghdj
MD5

05e65d1faac2a4a1d8871368112f1780
SHA1

c01de754a9ed3a069f7ecebf598da097772a8788
SHA256

622a77050e11045b7d7401c8f07a6c3441a7b25a8ac821002f16905c0b4741cc
SHA512

9b150c9060e2f075205b8bf28eca04ec4895443140c50a100fdf0dd520d74d886ba868e77e0fe7c2c100fdf59499acc4c70f363c8663046e482fa3b893808971
SSDEEP

24576:4OClCotedJS8/usmEWWxqSEN+lHKJcOMwK:XpJS8msmk3z3OMwK

Score

8^/10

discovery persistence spyware stealer upx

Malware Config

Targets

- Target
  
  622a77050e11045b7d7401c8f07a6c3441a7b25a8ac821002f16905c0b4741cc
- Size
  
  816KB
- MD5
  
  05e65d1faac2a4a1d8871368112f1780
- SHA1
  
  c01de754a9ed3a069f7ecebf598da097772a8788
- SHA256
  
  622a77050e11045b7d7401c8f07a6c3441a7b25a8ac821002f16905c0b4741cc
- SHA512
  
  9b150c9060e2f075205b8bf28eca04ec4895443140c50a100fdf0dd520d74d886ba868e77e0fe7c2c100fdf59499acc4c70f363c8663046e482fa3b893808971
- SSDEEP
  
  24576:4OClCotedJS8/usmEWWxqSEN+lHKJcOMwK:XpJS8msmk3z3OMwK
Score

8^/10

discovery persistence spyware stealer upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealerupx

behavioral2