fa613c8fea76e4dfdbb11cd898502979c46a9e26e7ca44db51066d5fd94fb620 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa613c8fea76e4dfdbb11cd898502979c46a9e26e7ca44db51066d5fd94fb620
Size

815KB
Sample

221128-jppsysfh93
MD5

4f154f6ae26fb8a2b091ea17232717f0
SHA1

8af44a5d3467b347a8d13ad393eea1fb0b86713b
SHA256

fa613c8fea76e4dfdbb11cd898502979c46a9e26e7ca44db51066d5fd94fb620
SHA512

6c8c9dd28b5087772d16874d1aaf5db458d6e66f450d7db7a1631eaf80812e0a939cbc559a338157ef08b29f31509e2a279213bea6fb2233dec949f30c2d3d67
SSDEEP

12288:+dtEhkGucJLrtZWgMJp286W04E9lZxpX/fxHxS6Arb3xj1D5wLePDT:MEhkGuS7Wxq8vSfxVJRDIBhDDT

Score

8^/10

discovery persistence spyware stealer upx

Malware Config

Targets

- Target
  
  fa613c8fea76e4dfdbb11cd898502979c46a9e26e7ca44db51066d5fd94fb620
- Size
  
  815KB
- MD5
  
  4f154f6ae26fb8a2b091ea17232717f0
- SHA1
  
  8af44a5d3467b347a8d13ad393eea1fb0b86713b
- SHA256
  
  fa613c8fea76e4dfdbb11cd898502979c46a9e26e7ca44db51066d5fd94fb620
- SHA512
  
  6c8c9dd28b5087772d16874d1aaf5db458d6e66f450d7db7a1631eaf80812e0a939cbc559a338157ef08b29f31509e2a279213bea6fb2233dec949f30c2d3d67
- SSDEEP
  
  12288:+dtEhkGucJLrtZWgMJp286W04E9lZxpX/fxHxS6Arb3xj1D5wLePDT:MEhkGuS7Wxq8vSfxVJRDIBhDDT
Score

8^/10

discovery persistence spyware stealer upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealerupx

behavioral2