Overview

overview

8

Static

static

ab9aa8ba2c...8d.exe

windows7-x64

8

ab9aa8ba2c...8d.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ab9aa8ba2c621be1b8054b47e1a8e88180828a6caebf5698c0314dbf3f2bed8d

  • Size

    1.2MB

  • Sample

    221130-3jjjjaaa4v

  • MD5

    caa6e798c23f74c0f490a54e2f75743f

  • SHA1

    9fa08b8979891153071645a2a0c025f59c664d6c

  • SHA256

    ab9aa8ba2c621be1b8054b47e1a8e88180828a6caebf5698c0314dbf3f2bed8d

  • SHA512

    03fc9643f9d6f3f344298638c73f78eae55123d3aecfc9bf97de47032e0fdfa04d61f49c148d1414c458da5d4c136d2d758f7a02ebe5e9874e5273a263748744

  • SSDEEP

    24576:urJeREL+i11c2dQ5Tvb8fDKfInP/Ehj7I0ayqntxCWBL2wY:kJIi11c2d2oDyIg7I0ayqnVtM

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      ab9aa8ba2c621be1b8054b47e1a8e88180828a6caebf5698c0314dbf3f2bed8d

    • Size

      1.2MB

    • MD5

      caa6e798c23f74c0f490a54e2f75743f

    • SHA1

      9fa08b8979891153071645a2a0c025f59c664d6c

    • SHA256

      ab9aa8ba2c621be1b8054b47e1a8e88180828a6caebf5698c0314dbf3f2bed8d

    • SHA512

      03fc9643f9d6f3f344298638c73f78eae55123d3aecfc9bf97de47032e0fdfa04d61f49c148d1414c458da5d4c136d2d758f7a02ebe5e9874e5273a263748744

    • SSDEEP

      24576:urJeREL+i11c2dQ5Tvb8fDKfInP/Ehj7I0ayqntxCWBL2wY:kJIi11c2d2oDyIg7I0ayqnVtM

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks