3d6f916e3b3089c2eae02306e3cdafff37a5d20d59c38761658b539a9f1987f8 | Triage

Sharing

General

Target

3d6f916e3b3089c2eae02306e3cdafff37a5d20d59c38761658b539a9f1987f8
Size

800KB
Sample

221125-c2bnjaeh35
MD5

e25b66d6431bdc5b52b5b5346047927e
SHA1

93b0ce5ea32d7f419a58e85e45569ea06dc12865
SHA256

3d6f916e3b3089c2eae02306e3cdafff37a5d20d59c38761658b539a9f1987f8
SHA512

41a94ef400b26e0c3b6d019bbde169dddb7f785c99ed7df879fff0a0a87faa7740e7f6431b25d19f4e30e4294c90b9f1134bef49c2c8d2a9c58f1cb447fbcd95
SSDEEP

12288:fnEWz2cqhqgaL8uGrYtOVQXY/0UQ5Z3OKn+ZMVv0Oc537UinYbeypW9zgwv9Rhw:fKhqgaouGrYuQo/Jy3OK+8jc5r1I49

Score

8^/10

discovery persistence spyware stealer upx

Malware Config

Targets

- Target
  
  3d6f916e3b3089c2eae02306e3cdafff37a5d20d59c38761658b539a9f1987f8
- Size
  
  800KB
- MD5
  
  e25b66d6431bdc5b52b5b5346047927e
- SHA1
  
  93b0ce5ea32d7f419a58e85e45569ea06dc12865
- SHA256
  
  3d6f916e3b3089c2eae02306e3cdafff37a5d20d59c38761658b539a9f1987f8
- SHA512
  
  41a94ef400b26e0c3b6d019bbde169dddb7f785c99ed7df879fff0a0a87faa7740e7f6431b25d19f4e30e4294c90b9f1134bef49c2c8d2a9c58f1cb447fbcd95
- SSDEEP
  
  12288:fnEWz2cqhqgaL8uGrYtOVQXY/0UQ5Z3OKn+ZMVv0Oc537UinYbeypW9zgwv9Rhw:fKhqgaouGrYuQo/Jy3OK+8jc5r1I49
Score

8^/10

discovery persistence spyware stealer upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealerupx

behavioral2