895b10c83f6f4e87b5e80ad03382183b0563374b704cc856b3e259746389c6f6 | Triage

Sharing

General

Target

895b10c83f6f4e87b5e80ad03382183b0563374b704cc856b3e259746389c6f6
Size

838KB
Sample

221123-lyh3wacf35
MD5

34d535052ab6151670f4a3c082faa315
SHA1

178cbaf053afbe9bd53fa8470de31bb98fe05ace
SHA256

895b10c83f6f4e87b5e80ad03382183b0563374b704cc856b3e259746389c6f6
SHA512

c84c64a6b54c8a7a6502232b2e5b3f58373839ff0b72ff906325401e7140e42e4ce4fe6f42b16c607b9b3938ad231ba08fe44047b58083ebaac21782839461f1
SSDEEP

24576:oZWDz7P7DMZE8RNoZUWiUxYKWtmnZvEWBggEhsw:9MdcZrigbZ8egLsw

Score

8^/10

discovery persistence spyware stealer upx

Malware Config

Targets

- Target
  
  895b10c83f6f4e87b5e80ad03382183b0563374b704cc856b3e259746389c6f6
- Size
  
  838KB
- MD5
  
  34d535052ab6151670f4a3c082faa315
- SHA1
  
  178cbaf053afbe9bd53fa8470de31bb98fe05ace
- SHA256
  
  895b10c83f6f4e87b5e80ad03382183b0563374b704cc856b3e259746389c6f6
- SHA512
  
  c84c64a6b54c8a7a6502232b2e5b3f58373839ff0b72ff906325401e7140e42e4ce4fe6f42b16c607b9b3938ad231ba08fe44047b58083ebaac21782839461f1
- SSDEEP
  
  24576:oZWDz7P7DMZE8RNoZUWiUxYKWtmnZvEWBggEhsw:9MdcZrigbZ8egLsw
Score

8^/10

discovery persistence spyware stealer upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealerupx

behavioral2