Overview

overview

8

Static

static

8

33c16e7cca...d4.exe

windows7-x64

8

33c16e7cca...d4.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    33c16e7cca5cec9d5be346118716deb5eedc5e62c02ef89b038eda33c2200cd4

  • Size

    844KB

  • Sample

    221124-aq2z8sfb24

  • MD5

    36d8dfc29a057723d3cb22c163b121e0

  • SHA1

    f1d530e64e0b45597f80952409250234c752b68c

  • SHA256

    33c16e7cca5cec9d5be346118716deb5eedc5e62c02ef89b038eda33c2200cd4

  • SHA512

    f2c78235928230b26f66e43774256dfe816a590dadad58a630f158b7be6217c01f3e52308df615cd63809bffd76d0be88d61c8bf431b9add2651fd5db3dd1618

  • SSDEEP

    24576:xaVaVaVaVaVaVaVaVaVaVaVaVaw0aW+IYDPx:b0aWQ

Score
8/10
spywarestealerupx

Malware Config

Targets

    • Target

      33c16e7cca5cec9d5be346118716deb5eedc5e62c02ef89b038eda33c2200cd4

    • Size

      844KB

    • MD5

      36d8dfc29a057723d3cb22c163b121e0

    • SHA1

      f1d530e64e0b45597f80952409250234c752b68c

    • SHA256

      33c16e7cca5cec9d5be346118716deb5eedc5e62c02ef89b038eda33c2200cd4

    • SHA512

      f2c78235928230b26f66e43774256dfe816a590dadad58a630f158b7be6217c01f3e52308df615cd63809bffd76d0be88d61c8bf431b9add2651fd5db3dd1618

    • SSDEEP

      24576:xaVaVaVaVaVaVaVaVaVaVaVaVaw0aW+IYDPx:b0aWQ

    Score
    8/10
    spywarestealerupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks