Overview

overview

8

Static

static

8907794e31...f2.exe

windows7-x64

8

8907794e31...f2.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8907794e319f38f3e9dcd20e7b0daa9f6c3941aa173b33bf2684d8abc05ce2f2

  • Size

    800KB

  • Sample

    221124-2mdl1sgh4w

  • MD5

    bda06d1353a511c44e716cf0c3ee57ce

  • SHA1

    80b3e0ae7a7bb9e0b6fe06a2c6cbbf5a0262fea7

  • SHA256

    8907794e319f38f3e9dcd20e7b0daa9f6c3941aa173b33bf2684d8abc05ce2f2

  • SHA512

    684ad1275c71f5ed88cae9cada6dc42befb500b7b18c375f6f69ac3267c959ef1540c5af47d2cf341c33d833ed5193fa3b06fce306ea8d831a8a3af6c67ba5c0

  • SSDEEP

    24576:C0p83JYUBN/HMT3TDWr8CV/nQSTbe6vv/UBVb2pFzr:C0p83V9MT3TDQ8SRT66X/Eb2p

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      8907794e319f38f3e9dcd20e7b0daa9f6c3941aa173b33bf2684d8abc05ce2f2

    • Size

      800KB

    • MD5

      bda06d1353a511c44e716cf0c3ee57ce

    • SHA1

      80b3e0ae7a7bb9e0b6fe06a2c6cbbf5a0262fea7

    • SHA256

      8907794e319f38f3e9dcd20e7b0daa9f6c3941aa173b33bf2684d8abc05ce2f2

    • SHA512

      684ad1275c71f5ed88cae9cada6dc42befb500b7b18c375f6f69ac3267c959ef1540c5af47d2cf341c33d833ed5193fa3b06fce306ea8d831a8a3af6c67ba5c0

    • SSDEEP

      24576:C0p83JYUBN/HMT3TDWr8CV/nQSTbe6vv/UBVb2pFzr:C0p83V9MT3TDQ8SRT66X/Eb2p

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks