Overview

overview

8

Static

static

a9fd0fe73c...94.exe

windows7-x64

8

a9fd0fe73c...94.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a9fd0fe73c0cca6cde3d5f2c4a6f4822503d85fabbfd3f0aad1ba3740ef72994

  • Size

    838KB

  • Sample

    221123-lyhgcaga2y

  • MD5

    c0b7452dd533a967d4eacf551bef2a74

  • SHA1

    ffcda4088b081250f9155ea984bc98a10313d266

  • SHA256

    a9fd0fe73c0cca6cde3d5f2c4a6f4822503d85fabbfd3f0aad1ba3740ef72994

  • SHA512

    acc235e3cf15413304a5d5f117a9c06016d69613b1fb97ca2e087d4ebe2d4ec6162b354177dc7027b3d09f139bc2388e3983d42b01ce12eb246d809f0db7c92b

  • SSDEEP

    24576:IZWDz7P7DMZE8RNoZUWiUxYKWtmnZvEWBggEhsw:dMdcZrigbZ8egLsw

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      a9fd0fe73c0cca6cde3d5f2c4a6f4822503d85fabbfd3f0aad1ba3740ef72994

    • Size

      838KB

    • MD5

      c0b7452dd533a967d4eacf551bef2a74

    • SHA1

      ffcda4088b081250f9155ea984bc98a10313d266

    • SHA256

      a9fd0fe73c0cca6cde3d5f2c4a6f4822503d85fabbfd3f0aad1ba3740ef72994

    • SHA512

      acc235e3cf15413304a5d5f117a9c06016d69613b1fb97ca2e087d4ebe2d4ec6162b354177dc7027b3d09f139bc2388e3983d42b01ce12eb246d809f0db7c92b

    • SSDEEP

      24576:IZWDz7P7DMZE8RNoZUWiUxYKWtmnZvEWBggEhsw:dMdcZrigbZ8egLsw

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks