Overview

overview

9

Static

static

1

21d4eb5194...6c.exe

windows7-x64

9

21d4eb5194...6c.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    21d4eb5194c77b1f67f4ae73b6299dd4b31702a0c475ad371ecd15d560cffc6c

  • Size

    4.5MB

  • Sample

    221125-w2ly2shh3t

  • MD5

    ff2c0b2b8c3da728a991d740c443f091

  • SHA1

    86c6ebdc06cb0f7bb57730e617743fbb09838f5b

  • SHA256

    21d4eb5194c77b1f67f4ae73b6299dd4b31702a0c475ad371ecd15d560cffc6c

  • SHA512

    e795b8cacb9ddc69c7abb3afa1b58db933c6d1caa65028e1218321ee80be0dd6a5c8cf9d4d18165a0e7bf29cf9a7d34e543a4d5421cdb4f250d9441963a65a36

  • SSDEEP

    98304:MxA12ahMqaAsUhpubzfo9UtUXmRrzyFi51O12p:MxWh04Pubzg94VuAPL

Score
9/10
discoveryspywarestealerupx

Malware Config

Targets

    • Target

      21d4eb5194c77b1f67f4ae73b6299dd4b31702a0c475ad371ecd15d560cffc6c

    • Size

      4.5MB

    • MD5

      ff2c0b2b8c3da728a991d740c443f091

    • SHA1

      86c6ebdc06cb0f7bb57730e617743fbb09838f5b

    • SHA256

      21d4eb5194c77b1f67f4ae73b6299dd4b31702a0c475ad371ecd15d560cffc6c

    • SHA512

      e795b8cacb9ddc69c7abb3afa1b58db933c6d1caa65028e1218321ee80be0dd6a5c8cf9d4d18165a0e7bf29cf9a7d34e543a4d5421cdb4f250d9441963a65a36

    • SSDEEP

      98304:MxA12ahMqaAsUhpubzfo9UtUXmRrzyFi51O12p:MxWh04Pubzg94VuAPL

    Score
    9/10
    discoveryspywarestealerupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks