882b11868ea284eec1925a792120f5f5855646191b0c34478f03751deb67417e | Triage

Sharing

General

Target

882b11868ea284eec1925a792120f5f5855646191b0c34478f03751deb67417e
Size

849KB
Sample

221129-gxte1afg2s
MD5

edb855e2a838dd1a3cb5c6413a0cfddf
SHA1

10aa999f04e80c63751bd1496d438a5923c435bc
SHA256

882b11868ea284eec1925a792120f5f5855646191b0c34478f03751deb67417e
SHA512

d35c06ce58b278d1ed862c06ca50aad09626fb3653269991c4d62f236e50d59ac6d78e1c9222998ac76e1605cad1c8cd890c785f9e8ab1318e5513d2257e28c6
SSDEEP

24576:EUD3C1O5WA+83UnoVDRwDVjRPBYWMRFm6:ND3wH43UnofOub

Score

8^/10

discovery persistence spyware stealer upx

Malware Config

Targets

- Target
  
  882b11868ea284eec1925a792120f5f5855646191b0c34478f03751deb67417e
- Size
  
  849KB
- MD5
  
  edb855e2a838dd1a3cb5c6413a0cfddf
- SHA1
  
  10aa999f04e80c63751bd1496d438a5923c435bc
- SHA256
  
  882b11868ea284eec1925a792120f5f5855646191b0c34478f03751deb67417e
- SHA512
  
  d35c06ce58b278d1ed862c06ca50aad09626fb3653269991c4d62f236e50d59ac6d78e1c9222998ac76e1605cad1c8cd890c785f9e8ab1318e5513d2257e28c6
- SSDEEP
  
  24576:EUD3C1O5WA+83UnoVDRwDVjRPBYWMRFm6:ND3wH43UnofOub
Score

8^/10

discovery persistence spyware stealer upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealerupx

behavioral2