Overview

overview

8

Static

static

9adc03f007...6a.exe

windows7-x64

8

9adc03f007...6a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9adc03f00702e1f6f94dd4532b3b012ffd4768d905669529e710263ae65ea06a

  • Size

    1.1MB

  • Sample

    221201-ay5fbshe88

  • MD5

    d4c2e5fc446d7a7b13860ef925d1b6a9

  • SHA1

    dd94afe4154c199d07fde7f112dfac78030981ae

  • SHA256

    9adc03f00702e1f6f94dd4532b3b012ffd4768d905669529e710263ae65ea06a

  • SHA512

    b4d1370f920dc285673f98b6fcccf982f899889686a231a8af63b1dbf01c12c97d6599a2a02c6b56436b620d0c7e5a958bb9ea8d44ec31dd7373d3607ea1ce2f

  • SSDEEP

    24576:qMWCfmwUulg/6ykJ31V4JylOx+7vevNpNeWvOakbDlPo:XfmwUYwDe31VTl0+ToNrkdw

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      9adc03f00702e1f6f94dd4532b3b012ffd4768d905669529e710263ae65ea06a

    • Size

      1.1MB

    • MD5

      d4c2e5fc446d7a7b13860ef925d1b6a9

    • SHA1

      dd94afe4154c199d07fde7f112dfac78030981ae

    • SHA256

      9adc03f00702e1f6f94dd4532b3b012ffd4768d905669529e710263ae65ea06a

    • SHA512

      b4d1370f920dc285673f98b6fcccf982f899889686a231a8af63b1dbf01c12c97d6599a2a02c6b56436b620d0c7e5a958bb9ea8d44ec31dd7373d3607ea1ce2f

    • SSDEEP

      24576:qMWCfmwUulg/6ykJ31V4JylOx+7vevNpNeWvOakbDlPo:XfmwUYwDe31VTl0+ToNrkdw

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks