Overview

overview

8

Static

static

9683689376...2a.exe

windows7-x64

8

9683689376...2a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    968368937642924ce92b56d7a47310dbcdf10e614e29fb78c440870c2c8d402a

  • Size

    1.4MB

  • Sample

    221126-k6kq1afh98

  • MD5

    1ae843553f097b8833dbea6542abe05f

  • SHA1

    bb00e5ade10696b19cab85f5cb840641da26756b

  • SHA256

    968368937642924ce92b56d7a47310dbcdf10e614e29fb78c440870c2c8d402a

  • SHA512

    671c0d4def2f558f29da87035fe453dd42243a44e3c6f06ed5c42bfa41341a0e044dffd31e145bc1a347e6b17204f76af2df358f34c09e125e593e51ab092009

  • SSDEEP

    24576:4z+V73UDnjipVaojsyJLExIpuCYb93NO1eV:4z+l3UDjipVsOExIpuCYbfOe

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      968368937642924ce92b56d7a47310dbcdf10e614e29fb78c440870c2c8d402a

    • Size

      1.4MB

    • MD5

      1ae843553f097b8833dbea6542abe05f

    • SHA1

      bb00e5ade10696b19cab85f5cb840641da26756b

    • SHA256

      968368937642924ce92b56d7a47310dbcdf10e614e29fb78c440870c2c8d402a

    • SHA512

      671c0d4def2f558f29da87035fe453dd42243a44e3c6f06ed5c42bfa41341a0e044dffd31e145bc1a347e6b17204f76af2df358f34c09e125e593e51ab092009

    • SSDEEP

      24576:4z+V73UDnjipVaojsyJLExIpuCYb93NO1eV:4z+l3UDjipVsOExIpuCYbfOe

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks