Overview

overview

9

Static

static

9

aa042b1480...0a.dll

windows7-x64

8

aa042b1480...0a.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa042b148014207c0453f12e5c5c365469f7bb7c8e8eeeb9c2f1dfe19543420a

  • Size

    113KB

  • Sample

    221123-l2m61agc2v

  • MD5

    4056a199aff5b390faa285881ae3d890

  • SHA1

    39b155e7a9756fd7534e50598d15a942aeb6d7d0

  • SHA256

    aa042b148014207c0453f12e5c5c365469f7bb7c8e8eeeb9c2f1dfe19543420a

  • SHA512

    9c11a886dd3524cc6390699cedf855c97151536545983a196d6b3b2d2b957c5fdc94c4f8cf8d74d93f1082d1c55e01702f9b1d25fee6ce5a468d1791baf42ef7

  • SSDEEP

    1536:y+bFc3jJtT+d5iDA5OO6ON2FhGMsKWItQK8Mqpcs1RQ5+bFFkzWCi8Qaa:RF8JtU5f5TMWOQK8MqVH+IH

Score
9/10
spywarestealerupx

Malware Config

Targets

    • Target

      aa042b148014207c0453f12e5c5c365469f7bb7c8e8eeeb9c2f1dfe19543420a

    • Size

      113KB

    • MD5

      4056a199aff5b390faa285881ae3d890

    • SHA1

      39b155e7a9756fd7534e50598d15a942aeb6d7d0

    • SHA256

      aa042b148014207c0453f12e5c5c365469f7bb7c8e8eeeb9c2f1dfe19543420a

    • SHA512

      9c11a886dd3524cc6390699cedf855c97151536545983a196d6b3b2d2b957c5fdc94c4f8cf8d74d93f1082d1c55e01702f9b1d25fee6ce5a468d1791baf42ef7

    • SSDEEP

      1536:y+bFc3jJtT+d5iDA5OO6ON2FhGMsKWItQK8Mqpcs1RQ5+bFFkzWCi8Qaa:RF8JtU5f5TMWOQK8MqVH+IH

    Score
    8/10
    spywarestealerupx

    • Blocklisted process makes network request

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks