Overview

overview

8

Static

static

8

de8a1ac6e2...d2.exe

windows7-x64

8

de8a1ac6e2...d2.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    de8a1ac6e275428b41488f973dc98baf1b281b2110e88e35a80ca777caec27d2

  • Size

    895KB

  • Sample

    221125-ntg15aeb87

  • MD5

    48069efb73c7da115546bec67e4c6aed

  • SHA1

    857c4584fd5eac3bec2f8d9bef18cb25ed1823fa

  • SHA256

    de8a1ac6e275428b41488f973dc98baf1b281b2110e88e35a80ca777caec27d2

  • SHA512

    94203bb91b1bbb57391baaeed5ec514137888a2c273c4b33428190e72d7125fea6e92005433af8d395a8587002c750dbfda4fd36fc438eed97dee3294f34c823

  • SSDEEP

    12288:eQPOKjA1699/lIV380g7+Pe54/VztS+grM0bCTPw0qzp8YoiEpn4r9D/ydJwp/D:J2KjA09LIJ8c73SN9fzCYApn4rYda

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      de8a1ac6e275428b41488f973dc98baf1b281b2110e88e35a80ca777caec27d2

    • Size

      895KB

    • MD5

      48069efb73c7da115546bec67e4c6aed

    • SHA1

      857c4584fd5eac3bec2f8d9bef18cb25ed1823fa

    • SHA256

      de8a1ac6e275428b41488f973dc98baf1b281b2110e88e35a80ca777caec27d2

    • SHA512

      94203bb91b1bbb57391baaeed5ec514137888a2c273c4b33428190e72d7125fea6e92005433af8d395a8587002c750dbfda4fd36fc438eed97dee3294f34c823

    • SSDEEP

      12288:eQPOKjA1699/lIV380g7+Pe54/VztS+grM0bCTPw0qzp8YoiEpn4r9D/ydJwp/D:J2KjA09LIJ8c73SN9fzCYApn4rYda

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks