2e68a9c2a35663f4260a4c815afc3041b0237c858661394a1d7b56ccb4a92da5 | Triage

Sharing

General

Target

2e68a9c2a35663f4260a4c815afc3041b0237c858661394a1d7b56ccb4a92da5
Size

871KB
Sample

221123-r2jrgaab62
MD5

3aff01c41db37ff0d1d1f1e56bb402e6
SHA1

2746a2e258dbc58dd2379849c2858633405a2738
SHA256

2e68a9c2a35663f4260a4c815afc3041b0237c858661394a1d7b56ccb4a92da5
SHA512

fd6a4df9eb1a695af5d276ecee770413c282990076250a1e025711aadea5018843d76942d2e5f43c575cbee5494344161fc1c394eec890c41ac8369a7128876a
SSDEEP

12288:Eb3af4Y8CxixTmNCOQaXrZG8WUmaY0PrXG62IGy49lnBtTNpMyqtS2:Een8Cij7GZmU7ljXv2IGHJtTNCHS2

Score

8^/10

discovery persistence spyware stealer upx

Malware Config

Targets

- Target
  
  2e68a9c2a35663f4260a4c815afc3041b0237c858661394a1d7b56ccb4a92da5
- Size
  
  871KB
- MD5
  
  3aff01c41db37ff0d1d1f1e56bb402e6
- SHA1
  
  2746a2e258dbc58dd2379849c2858633405a2738
- SHA256
  
  2e68a9c2a35663f4260a4c815afc3041b0237c858661394a1d7b56ccb4a92da5
- SHA512
  
  fd6a4df9eb1a695af5d276ecee770413c282990076250a1e025711aadea5018843d76942d2e5f43c575cbee5494344161fc1c394eec890c41ac8369a7128876a
- SSDEEP
  
  12288:Eb3af4Y8CxixTmNCOQaXrZG8WUmaY0PrXG62IGy49lnBtTNpMyqtS2:Een8Cij7GZmU7ljXv2IGHJtTNCHS2
Score

8^/10

discovery persistence spyware stealer upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealerupx

behavioral2