Overview

overview

8

Static

static

8

66fe51d97e...7e.exe

windows7-x64

8

66fe51d97e...7e.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    66fe51d97ebb5ecc0fa627d8ac102e5387643f6534aceca0bc359624f17a187e

  • Size

    916KB

  • Sample

    221123-vhmkssha89

  • MD5

    36135c2a80905d581a552508134c8b09

  • SHA1

    00a03e993f2e543ee2915185ba8b85fa0a2d5513

  • SHA256

    66fe51d97ebb5ecc0fa627d8ac102e5387643f6534aceca0bc359624f17a187e

  • SHA512

    e800d1b76615b6e4da759e0ad43a34095c7c7e55f10bbf0ed516efbd4f3b1230cc419ba5fb448b1670c74e3cded56df948522228a4745595dd92e847ed66df6e

  • SSDEEP

    24576:ZJnav4dbkHXlQTlACio/uyy5150XxiRE/Wt:Pav48X+TlAfUoteF/g

Score
8/10
spywarestealerupx

Malware Config

Targets

    • Target

      66fe51d97ebb5ecc0fa627d8ac102e5387643f6534aceca0bc359624f17a187e

    • Size

      916KB

    • MD5

      36135c2a80905d581a552508134c8b09

    • SHA1

      00a03e993f2e543ee2915185ba8b85fa0a2d5513

    • SHA256

      66fe51d97ebb5ecc0fa627d8ac102e5387643f6534aceca0bc359624f17a187e

    • SHA512

      e800d1b76615b6e4da759e0ad43a34095c7c7e55f10bbf0ed516efbd4f3b1230cc419ba5fb448b1670c74e3cded56df948522228a4745595dd92e847ed66df6e

    • SSDEEP

      24576:ZJnav4dbkHXlQTlACio/uyy5150XxiRE/Wt:Pav48X+TlAfUoteF/g

    Score
    8/10
    spywarestealerupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks