Overview

overview

8

Static

static

8

2524706b5b...64.exe

windows7-x64

8

2524706b5b...64.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2524706b5b9cdfaa5a31fbaf95989958086af50e1aab1d632c97a9f3eb38e664

  • Size

    895KB

  • Sample

    221123-s5c9jada94

  • MD5

    3c63c14babebc877936abb363c6da118

  • SHA1

    b4e928b088dfaf8c6beb119fccab340c6d259a8a

  • SHA256

    2524706b5b9cdfaa5a31fbaf95989958086af50e1aab1d632c97a9f3eb38e664

  • SHA512

    82bf8d7ee5c4f78e0f78f21aca5e7c7ea6776e33492c1c83ec219d09fd64b76a6dd1209a7bb401369731a5d2048173f975a77157e6647c21b2d015c11df8d15a

  • SSDEEP

    24576:RS/EKKA1XZCMp5nPPkLuQhHxGTqkEt6Rpu2mGPQ5rBvbMb:RIEKKAHR5PMLu0g7Rppgrx

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      2524706b5b9cdfaa5a31fbaf95989958086af50e1aab1d632c97a9f3eb38e664

    • Size

      895KB

    • MD5

      3c63c14babebc877936abb363c6da118

    • SHA1

      b4e928b088dfaf8c6beb119fccab340c6d259a8a

    • SHA256

      2524706b5b9cdfaa5a31fbaf95989958086af50e1aab1d632c97a9f3eb38e664

    • SHA512

      82bf8d7ee5c4f78e0f78f21aca5e7c7ea6776e33492c1c83ec219d09fd64b76a6dd1209a7bb401369731a5d2048173f975a77157e6647c21b2d015c11df8d15a

    • SSDEEP

      24576:RS/EKKA1XZCMp5nPPkLuQhHxGTqkEt6Rpu2mGPQ5rBvbMb:RIEKKAHR5PMLu0g7Rppgrx

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks