Overview

overview

8

Static

static

5b8f55cab0...56.exe

windows7-x64

8

5b8f55cab0...56.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    5b8f55cab0b938b7ac79f3687baf2aa4fe2e73430e06e2fc937833ee5e416256

  • Size

    1.1MB

  • Sample

    221129-kr7bfsgd81

  • MD5

    19ff39079de8f9831317ef2d21248cf1

  • SHA1

    99b101562fc4aaeba538f2d285c99b983d252f8a

  • SHA256

    5b8f55cab0b938b7ac79f3687baf2aa4fe2e73430e06e2fc937833ee5e416256

  • SHA512

    86f240ff6d1be18072f7116b2286ce914f12ed9a6bdf8f33e97033f3899cce0b360c40eae23b44e8b1ebf96c11af9baf9cea9aa90077e3adca923ae330701e36

  • SSDEEP

    12288:LcMWCrOuKmNXGIn6xDtAZoK6kjjX6PteeIJtRx6l5dlyCsYXKk+TbelxAUu8eJAW:wMWC6hI6kJqDIK5lLvP+TbelCUu8eWW

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      5b8f55cab0b938b7ac79f3687baf2aa4fe2e73430e06e2fc937833ee5e416256

    • Size

      1.1MB

    • MD5

      19ff39079de8f9831317ef2d21248cf1

    • SHA1

      99b101562fc4aaeba538f2d285c99b983d252f8a

    • SHA256

      5b8f55cab0b938b7ac79f3687baf2aa4fe2e73430e06e2fc937833ee5e416256

    • SHA512

      86f240ff6d1be18072f7116b2286ce914f12ed9a6bdf8f33e97033f3899cce0b360c40eae23b44e8b1ebf96c11af9baf9cea9aa90077e3adca923ae330701e36

    • SSDEEP

      12288:LcMWCrOuKmNXGIn6xDtAZoK6kjjX6PteeIJtRx6l5dlyCsYXKk+TbelxAUu8eJAW:wMWC6hI6kJqDIK5lLvP+TbelCUu8eWW

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks