Overview

overview

8

Static

static

9355f2a1ad...58.exe

windows7-x64

8

9355f2a1ad...58.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    9355f2a1ad4d1e5de72da2520b8f8b8d0c5213dd87743e00a018e2733f213758

  • Size

    1.2MB

  • Sample

    221129-fxsyssce4x

  • MD5

    f2de7ad903bb18acc778c4175b5c0eb3

  • SHA1

    18991662a4389412ff9c56ef4debd3d55128d384

  • SHA256

    9355f2a1ad4d1e5de72da2520b8f8b8d0c5213dd87743e00a018e2733f213758

  • SHA512

    5fe0dc51c49b5af08c148d5f0780eebca26501b4277624e4878a67ad33d59d1678e576ea9d5d19d7213ac54d9374070bebf6ddb376ec8a4a698c3c2b16351952

  • SSDEEP

    12288:cEqQmf49lUNT8H2Ah4385hUHVNVqGFaTwNLSzbDcikVxGPODovUnkWQ3CQtEMyAq:2Qt9lBN4s5hsLBoiC9/2nvMyKvTBy2+R

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      9355f2a1ad4d1e5de72da2520b8f8b8d0c5213dd87743e00a018e2733f213758

    • Size

      1.2MB

    • MD5

      f2de7ad903bb18acc778c4175b5c0eb3

    • SHA1

      18991662a4389412ff9c56ef4debd3d55128d384

    • SHA256

      9355f2a1ad4d1e5de72da2520b8f8b8d0c5213dd87743e00a018e2733f213758

    • SHA512

      5fe0dc51c49b5af08c148d5f0780eebca26501b4277624e4878a67ad33d59d1678e576ea9d5d19d7213ac54d9374070bebf6ddb376ec8a4a698c3c2b16351952

    • SSDEEP

      12288:cEqQmf49lUNT8H2Ah4385hUHVNVqGFaTwNLSzbDcikVxGPODovUnkWQ3CQtEMyAq:2Qt9lBN4s5hsLBoiC9/2nvMyKvTBy2+R

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks