Overview

overview

8

Static

static

9a53446c46...2e.exe

windows7-x64

8

9a53446c46...2e.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9a53446c4658db7cde17a05c201725cae2e1f01f7015a3ea3ff3917bdda1d82e

  • Size

    1.1MB

  • Sample

    221123-qvjx8ahh6z

  • MD5

    c024e974d0e4a6cbeb9af5eead2e5f3c

  • SHA1

    4abcbd00d06defe59f6f6682a9a79b5e1789fd25

  • SHA256

    9a53446c4658db7cde17a05c201725cae2e1f01f7015a3ea3ff3917bdda1d82e

  • SHA512

    30e5cc6a871df9e9ebfce7562267c056f378f75b92cd83f4b8bf1a7967811aa64ba63dc445026c6d71eac815c65a89891d4586b59fd5592ce5eccf1321fd0d66

  • SSDEEP

    12288:vqT+BUZRAWvNJkey/++BEaN6PvqCq/lzLd1KAW7NCV7Qq3gS02w/msRMCT9v0U:vqWWRzNyeyG7cpdz9QkV7QL+w/msRl

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      9a53446c4658db7cde17a05c201725cae2e1f01f7015a3ea3ff3917bdda1d82e

    • Size

      1.1MB

    • MD5

      c024e974d0e4a6cbeb9af5eead2e5f3c

    • SHA1

      4abcbd00d06defe59f6f6682a9a79b5e1789fd25

    • SHA256

      9a53446c4658db7cde17a05c201725cae2e1f01f7015a3ea3ff3917bdda1d82e

    • SHA512

      30e5cc6a871df9e9ebfce7562267c056f378f75b92cd83f4b8bf1a7967811aa64ba63dc445026c6d71eac815c65a89891d4586b59fd5592ce5eccf1321fd0d66

    • SSDEEP

      12288:vqT+BUZRAWvNJkey/++BEaN6PvqCq/lzLd1KAW7NCV7Qq3gS02w/msRMCT9v0U:vqWWRzNyeyG7cpdz9QkV7QL+w/msRl

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks