Overview

overview

8

Static

static

7a5fd8020e...1e.exe

windows7-x64

8

7a5fd8020e...1e.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7a5fd8020ee3b7e06f6592a1bedf656c26f4561b86cfb8029f56ee7a6655a31e

  • Size

    816KB

  • Sample

    221123-s5n12adb32

  • MD5

    fd17f4a8769254e96d0e586810cf0cce

  • SHA1

    1adfa83de35a71aa088b314759ebb8623908d9b4

  • SHA256

    7a5fd8020ee3b7e06f6592a1bedf656c26f4561b86cfb8029f56ee7a6655a31e

  • SHA512

    561c18513909949c3772d2d58902eabf830d6b4154a4292292a48f85f9c60d7c3258b464435a6f9cef8e7bc411a8f21ba2b7e845ab44d2aa7c006424741f488d

  • SSDEEP

    12288:8U04mjkcCYBohHF3CT8HbDX3Ic+czSe7I2tvIqzHClZSuWf2Q3sTJ+6Jx:8U041YAF3HHYcR+e7Iq+ZT37

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      7a5fd8020ee3b7e06f6592a1bedf656c26f4561b86cfb8029f56ee7a6655a31e

    • Size

      816KB

    • MD5

      fd17f4a8769254e96d0e586810cf0cce

    • SHA1

      1adfa83de35a71aa088b314759ebb8623908d9b4

    • SHA256

      7a5fd8020ee3b7e06f6592a1bedf656c26f4561b86cfb8029f56ee7a6655a31e

    • SHA512

      561c18513909949c3772d2d58902eabf830d6b4154a4292292a48f85f9c60d7c3258b464435a6f9cef8e7bc411a8f21ba2b7e845ab44d2aa7c006424741f488d

    • SSDEEP

      12288:8U04mjkcCYBohHF3CT8HbDX3Ic+czSe7I2tvIqzHClZSuWf2Q3sTJ+6Jx:8U041YAF3HHYcR+e7Iq+ZT37

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks