f44c825793ae91bc0234a89523aec87110ec35c08c3f640f5f99aac546efe525 | Triage

Sharing

General

Target

f44c825793ae91bc0234a89523aec87110ec35c08c3f640f5f99aac546efe525
Size

800KB
Sample

221123-pxnhrafe8s
MD5

4c80aed43b253f719893975bac2ee25b
SHA1

84dcd1f4da00c907c63621103e0b105e4d4c12c4
SHA256

f44c825793ae91bc0234a89523aec87110ec35c08c3f640f5f99aac546efe525
SHA512

9169898d9c793f711b6358f02a2103add38effbea77842af6888aceba1fd3fcc213acf943ebd441dde1c53826ba3287cd6eec3c3aaeaa59bfd45c9401b1705e5
SSDEEP

12288:EaFYru1hYyLOKCzoDi4NGMHM/mk0HmE0H7o9x049WWaH0d3rlvHxe9oNlwM2pf+Q:E4hYyLvxNLHMONJi7oQ49WexqMAGa

Score

8^/10

discovery persistence spyware stealer upx

Malware Config

Targets

- Target
  
  f44c825793ae91bc0234a89523aec87110ec35c08c3f640f5f99aac546efe525
- Size
  
  800KB
- MD5
  
  4c80aed43b253f719893975bac2ee25b
- SHA1
  
  84dcd1f4da00c907c63621103e0b105e4d4c12c4
- SHA256
  
  f44c825793ae91bc0234a89523aec87110ec35c08c3f640f5f99aac546efe525
- SHA512
  
  9169898d9c793f711b6358f02a2103add38effbea77842af6888aceba1fd3fcc213acf943ebd441dde1c53826ba3287cd6eec3c3aaeaa59bfd45c9401b1705e5
- SSDEEP
  
  12288:EaFYru1hYyLOKCzoDi4NGMHM/mk0HmE0H7o9x049WWaH0d3rlvHxe9oNlwM2pf+Q:E4hYyLvxNLHMONJi7oQ49WexqMAGa
Score

8^/10

discovery persistence spyware stealer upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealerupx

behavioral2