Overview

overview

8

Static

static

8

a6ecbeda85...5d.exe

windows7-x64

8

a6ecbeda85...5d.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a6ecbeda859b4b350ba255b1e74db1f949a376b0cba97364ba44e13696411b5d

  • Size

    340KB

  • Sample

    221107-vsqefahdd6

  • MD5

    00b9301df7598dba149f6ac247b32d3a

  • SHA1

    50cfaff169ef83cbaafe9e60383f063504f320b7

  • SHA256

    a6ecbeda859b4b350ba255b1e74db1f949a376b0cba97364ba44e13696411b5d

  • SHA512

    253ebe8ea0b0aaece48c4e432aef9e4a21c6bbc766ef2ec546e97f4b08d762940411e6b35e2435b614942155ba12123d39475710b0e716d4438df0f85ffec36f

  • SSDEEP

    6144:3JRFTYCpsu2v3BGRUyqinBazIVDNPHRCHZS/sC/X8prJvhdujyu:5h8vgUknBasVDN5C5S/szpdueu

Score
8/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      a6ecbeda859b4b350ba255b1e74db1f949a376b0cba97364ba44e13696411b5d

    • Size

      340KB

    • MD5

      00b9301df7598dba149f6ac247b32d3a

    • SHA1

      50cfaff169ef83cbaafe9e60383f063504f320b7

    • SHA256

      a6ecbeda859b4b350ba255b1e74db1f949a376b0cba97364ba44e13696411b5d

    • SHA512

      253ebe8ea0b0aaece48c4e432aef9e4a21c6bbc766ef2ec546e97f4b08d762940411e6b35e2435b614942155ba12123d39475710b0e716d4438df0f85ffec36f

    • SSDEEP

      6144:3JRFTYCpsu2v3BGRUyqinBazIVDNPHRCHZS/sC/X8prJvhdujyu:5h8vgUknBasVDN5C5S/szpdueu

    Score
    8/10
    persistencespywarestealerupx

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Sets service image path in registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks