Overview

overview

10

Static

static

8b490626d3...d5.exe

windows7-x64

10

8b490626d3...d5.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8b490626d3441c7bf4ed8a805d124d84e709cd10a9ff38efcb2114d4b02cddd5

  • Size

    168KB

  • Sample

    221201-1cd95afh7s

  • MD5

    ccf7168d642875dc8235a0d7f4da973e

  • SHA1

    49753a74eba6e370b1ea9c5c88bdf1c0c090edbd

  • SHA256

    8b490626d3441c7bf4ed8a805d124d84e709cd10a9ff38efcb2114d4b02cddd5

  • SHA512

    e3ad09e0e4bb15badd0a786b9ec72b92d572c4e1a07a8af1a9f19efe102fc5a41529bcff990540f3edf91bf1be8c616527952f5218e71e1ebcf00ee6826ac376

  • SSDEEP

    3072:AIFQiNdaX1FXDxGNr3R4Nysxia4SnMyhUOn1ZjhA1gvxfQ5mg7kEJgQM:A01daFZMNl4NbityH1Zj9x44ckEL

Score
10/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      8b490626d3441c7bf4ed8a805d124d84e709cd10a9ff38efcb2114d4b02cddd5

    • Size

      168KB

    • MD5

      ccf7168d642875dc8235a0d7f4da973e

    • SHA1

      49753a74eba6e370b1ea9c5c88bdf1c0c090edbd

    • SHA256

      8b490626d3441c7bf4ed8a805d124d84e709cd10a9ff38efcb2114d4b02cddd5

    • SHA512

      e3ad09e0e4bb15badd0a786b9ec72b92d572c4e1a07a8af1a9f19efe102fc5a41529bcff990540f3edf91bf1be8c616527952f5218e71e1ebcf00ee6826ac376

    • SSDEEP

      3072:AIFQiNdaX1FXDxGNr3R4Nysxia4SnMyhUOn1ZjhA1gvxfQ5mg7kEJgQM:A01daFZMNl4NbityH1Zj9x44ckEL

    Score
    10/10
    persistencespywarestealerupx

    • Modifies WinLogon for persistence

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks