Overview

overview

8

Static

static

91a3d50ee5...3a.exe

windows7-x64

8

91a3d50ee5...3a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    91a3d50ee5111caf454324505c6139c52aa589762a4287e0a211568357af223a

  • Size

    296KB

  • Sample

    221201-a5gb3saa93

  • MD5

    379bc8951e044e98dc5ad21024959ee0

  • SHA1

    45ad8774a786fa1252982e37fdda0d3d3822b05b

  • SHA256

    91a3d50ee5111caf454324505c6139c52aa589762a4287e0a211568357af223a

  • SHA512

    21bdaa0a5f10f3bbea75138473a9cc0e47a628e8f6654ec2231bfd361c3dfca0606afeced6f49f32f833ff5a37a05c9565f1ad879a3363adca491c2eba3eeb05

  • SSDEEP

    3072:7sUMT62/lvMnh1l1U7+vHlw6o3qx5tg6oJ2XfQaOorx4e2vTugfXVTGs6:ZH290n91U7YlHo3tBQIaOorx4eaLt76

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      91a3d50ee5111caf454324505c6139c52aa589762a4287e0a211568357af223a

    • Size

      296KB

    • MD5

      379bc8951e044e98dc5ad21024959ee0

    • SHA1

      45ad8774a786fa1252982e37fdda0d3d3822b05b

    • SHA256

      91a3d50ee5111caf454324505c6139c52aa589762a4287e0a211568357af223a

    • SHA512

      21bdaa0a5f10f3bbea75138473a9cc0e47a628e8f6654ec2231bfd361c3dfca0606afeced6f49f32f833ff5a37a05c9565f1ad879a3363adca491c2eba3eeb05

    • SSDEEP

      3072:7sUMT62/lvMnh1l1U7+vHlw6o3qx5tg6oJ2XfQaOorx4e2vTugfXVTGs6:ZH290n91U7YlHo3tBQIaOorx4eaLt76

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks