Overview

overview

8

Static

static

9c6e710aed...13.exe

windows7-x64

8

9c6e710aed...13.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9c6e710aed8f77153670df322458d09a4b9a53e5af567df410d7a455f98c0213

  • Size

    1.1MB

  • Sample

    221201-av26sshc58

  • MD5

    a4a11c1966bd2fe31c6bc9892d1485c4

  • SHA1

    3ece576ba1d14d9901dbacee8af939f40edbaff2

  • SHA256

    9c6e710aed8f77153670df322458d09a4b9a53e5af567df410d7a455f98c0213

  • SHA512

    73a0a72652a3c17f964b357762a12092ba318234cc9d3f45a3298775d919e9738b710f12e8f90752f19fdeae3c10fd9666490d3f11af19e24f0b267d32c8a641

  • SSDEEP

    24576:AMWCv+ayv5HMXkildUnbi5led9+veb4++yS:VvSGfGnbseoec+y

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      9c6e710aed8f77153670df322458d09a4b9a53e5af567df410d7a455f98c0213

    • Size

      1.1MB

    • MD5

      a4a11c1966bd2fe31c6bc9892d1485c4

    • SHA1

      3ece576ba1d14d9901dbacee8af939f40edbaff2

    • SHA256

      9c6e710aed8f77153670df322458d09a4b9a53e5af567df410d7a455f98c0213

    • SHA512

      73a0a72652a3c17f964b357762a12092ba318234cc9d3f45a3298775d919e9738b710f12e8f90752f19fdeae3c10fd9666490d3f11af19e24f0b267d32c8a641

    • SSDEEP

      24576:AMWCv+ayv5HMXkildUnbi5led9+veb4++yS:VvSGfGnbseoec+y

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks