859864e545612c7e49f6c25ce41edec93fe4fd20bca73bd34821476b68863253 | Triage

Sharing

General

Target

859864e545612c7e49f6c25ce41edec93fe4fd20bca73bd34821476b68863253
Size

847KB
Sample

221129-g9pmksgg5v
MD5

8457588feddfa95eb1f54bf50393951d
SHA1

72ebcfbd6bc9191a7be10603dccbc493c2ac91dc
SHA256

859864e545612c7e49f6c25ce41edec93fe4fd20bca73bd34821476b68863253
SHA512

5a793e17f467beb81d6301c99cc2cd1e22d72c04f7594941d399a51216b52bb8d3e8d9b944b89525201053d232c7e21752a39bbfc1d82f6dc5f51a73fa80d6b6
SSDEEP

24576:8b4e2Ikujcj1v5xoOZ14ZBW1PrIw/3vNuVT9:8b4e2IkuGRPoKKO06oV

Score

8^/10

discovery persistence spyware stealer upx

Malware Config

Targets

- Target
  
  859864e545612c7e49f6c25ce41edec93fe4fd20bca73bd34821476b68863253
- Size
  
  847KB
- MD5
  
  8457588feddfa95eb1f54bf50393951d
- SHA1
  
  72ebcfbd6bc9191a7be10603dccbc493c2ac91dc
- SHA256
  
  859864e545612c7e49f6c25ce41edec93fe4fd20bca73bd34821476b68863253
- SHA512
  
  5a793e17f467beb81d6301c99cc2cd1e22d72c04f7594941d399a51216b52bb8d3e8d9b944b89525201053d232c7e21752a39bbfc1d82f6dc5f51a73fa80d6b6
- SSDEEP
  
  24576:8b4e2Ikujcj1v5xoOZ14ZBW1PrIw/3vNuVT9:8b4e2IkuGRPoKKO06oV
Score

8^/10

discovery persistence spyware stealer upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealerupx

behavioral2