f0c719aecbcf89c0d232877f60c6242b667aa703f413d8c65bd080745ee384d7 | Triage

Sharing

General

Target

f0c719aecbcf89c0d232877f60c6242b667aa703f413d8c65bd080745ee384d7
Size

811KB
Sample

221123-s5d6tsda95
MD5

b0250e27941d871cb41b48ea29a64e39
SHA1

2a01d2f35aee5167e0993baa5ec3216bfeed0f5f
SHA256

f0c719aecbcf89c0d232877f60c6242b667aa703f413d8c65bd080745ee384d7
SHA512

a25a90d2a849a97f2d1b91f37baf3d342ef86def63dfbd674a261c8cf61e9d8010e9870f5c5da45785d26f67296633733ac76af6a27663d6156fb8b990c656d3
SSDEEP

12288:byrOQCTepqK5JbQtZWhQx2tb7Pbwv2ndejXxQMcKZcNZVlFslMchF41pj/+/ALAJ:ggTOXstZIP9Ccdejx5ZcR9chFR

Score

8^/10

discovery persistence spyware stealer upx

Malware Config

Targets

- Target
  
  f0c719aecbcf89c0d232877f60c6242b667aa703f413d8c65bd080745ee384d7
- Size
  
  811KB
- MD5
  
  b0250e27941d871cb41b48ea29a64e39
- SHA1
  
  2a01d2f35aee5167e0993baa5ec3216bfeed0f5f
- SHA256
  
  f0c719aecbcf89c0d232877f60c6242b667aa703f413d8c65bd080745ee384d7
- SHA512
  
  a25a90d2a849a97f2d1b91f37baf3d342ef86def63dfbd674a261c8cf61e9d8010e9870f5c5da45785d26f67296633733ac76af6a27663d6156fb8b990c656d3
- SSDEEP
  
  12288:byrOQCTepqK5JbQtZWhQx2tb7Pbwv2ndejXxQMcKZcNZVlFslMchF41pj/+/ALAJ:ggTOXstZIP9Ccdejx5ZcR9chFR
Score

8^/10

discovery persistence spyware stealer upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealerupx

behavioral2