Overview

overview

8

Static

static

d20094070d...87.exe

windows7-x64

8

d20094070d...87.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    d20094070d389dde2aad4dc525d949ee69b5405aea3d274004c347c79f5e4b87

  • Size

    428KB

  • Sample

    221124-lh8nlahb6s

  • MD5

    e5c6c4461e29d8a1a6db05e9d74c8a39

  • SHA1

    5d723cf3c3e519b91ca4e54ee2bb4e97296db8a3

  • SHA256

    d20094070d389dde2aad4dc525d949ee69b5405aea3d274004c347c79f5e4b87

  • SHA512

    eed056a6fe69b41a5677a6fccbc9c1730082ea166a89d865f666a5f05ac70dee612c5dcd57f07f2cdb03868771ef66f4059ce7473bb99c055606aecd6f40252d

  • SSDEEP

    6144:WNmarsjeXfpUplphppgpppfpmppXptpHpopntqvPTFX5ivVTyh3eA76IcIC9y2Yp:WOjD5CVGh3YhfU2YZ

Score
8/10
spywarestealerupx

Malware Config

Targets

    • Target

      d20094070d389dde2aad4dc525d949ee69b5405aea3d274004c347c79f5e4b87

    • Size

      428KB

    • MD5

      e5c6c4461e29d8a1a6db05e9d74c8a39

    • SHA1

      5d723cf3c3e519b91ca4e54ee2bb4e97296db8a3

    • SHA256

      d20094070d389dde2aad4dc525d949ee69b5405aea3d274004c347c79f5e4b87

    • SHA512

      eed056a6fe69b41a5677a6fccbc9c1730082ea166a89d865f666a5f05ac70dee612c5dcd57f07f2cdb03868771ef66f4059ce7473bb99c055606aecd6f40252d

    • SSDEEP

      6144:WNmarsjeXfpUplphppgpppfpmppXptpHpopntqvPTFX5ivVTyh3eA76IcIC9y2Yp:WOjD5CVGh3YhfU2YZ

    Score
    8/10
    spywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks