7dc7d6953513b5303d36164e5e4813f299124cd16188da1c2754defb99758240 | Triage

Submit
Reports

Overview

overview

8

Static

static

8

7dc7d69535...40.exe

windows7-x64

8

7dc7d69535...40.exe

windows10-2004-x64

8

Sharing

General

Target

7dc7d6953513b5303d36164e5e4813f299124cd16188da1c2754defb99758240
Size

516KB
Sample

221124-e4wslacd9s
MD5

24e39c4f246d1546f434702c21104cf9
SHA1

6434999225d31f8cc5bede84d3ac57fa4bddc7df
SHA256

7dc7d6953513b5303d36164e5e4813f299124cd16188da1c2754defb99758240
SHA512

ad29a2a0549e7c837497a3b67daa58fa34f4ee27a887bcc63c6ec1590bec4c9f9a4df71775e1d515f7e6f9cb505ceb50129f17d20f53e8d08ec2ea81edbab5c6
SSDEEP

12288:STPBriKbQWuXQ1e0lZ9yBjairmluu6Q9uqrXZeEhLBLZ2:kPsKbQQ54BPrmlum9uUZeYLBF

Score

8^/10

ransomware spyware stealer upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

7dc7d6953513b5303d36164e5e4813f299124cd16188da1c2754defb99758240.exe

Resource

win7-20220812-en

ransomware spyware stealer upx

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

7dc7d6953513b5303d36164e5e4813f299124cd16188da1c2754defb99758240.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  7dc7d6953513b5303d36164e5e4813f299124cd16188da1c2754defb99758240
- Size
  
  516KB
- MD5
  
  24e39c4f246d1546f434702c21104cf9
- SHA1
  
  6434999225d31f8cc5bede84d3ac57fa4bddc7df
- SHA256
  
  7dc7d6953513b5303d36164e5e4813f299124cd16188da1c2754defb99758240
- SHA512
  
  ad29a2a0549e7c837497a3b67daa58fa34f4ee27a887bcc63c6ec1590bec4c9f9a4df71775e1d515f7e6f9cb505ceb50129f17d20f53e8d08ec2ea81edbab5c6
- SSDEEP
  
  12288:STPBriKbQWuXQ1e0lZ9yBjairmluu6Q9uqrXZeEhLBLZ2:kPsKbQQ54BPrmlum9uUZeYLBF
Score

8^/10

ransomware spyware stealer upx
- Drops file in Drivers directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
- Sets desktop wallpaper using registry
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Defacement

Tasks

static1

behavioral1

ransomwarespywarestealerupx

behavioral2

© 2018-2024

Terms | Privacy