Overview

overview

8

Static

static

8a97a159d7...c4.exe

windows7-x64

8

8a97a159d7...c4.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a97a159d74df561759fb8d5cd75259ad872211c34f1aec3dd06b9b1391d6bc4

  • Size

    1.1MB

  • Sample

    221201-b7hhladc59

  • MD5

    f73768418c349d2fcd2224ed5e4cec11

  • SHA1

    fee1bb2a982a3b3cedf321e0239e593057bb9f5f

  • SHA256

    8a97a159d74df561759fb8d5cd75259ad872211c34f1aec3dd06b9b1391d6bc4

  • SHA512

    5894b800bea1bc71c0332e8b8fcb97a0c82554a06ede0cbb9458037da832fa6230eb5ea3256d54c21918228f83f9eb4a8cb9c1c895dc537849f40d6d6c527073

  • SSDEEP

    24576:WMWC0TqIeXhS6naoWo30fK9r/mOjLoQXSP:LgqIeXhPaTkoW/mOLHXA

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      8a97a159d74df561759fb8d5cd75259ad872211c34f1aec3dd06b9b1391d6bc4

    • Size

      1.1MB

    • MD5

      f73768418c349d2fcd2224ed5e4cec11

    • SHA1

      fee1bb2a982a3b3cedf321e0239e593057bb9f5f

    • SHA256

      8a97a159d74df561759fb8d5cd75259ad872211c34f1aec3dd06b9b1391d6bc4

    • SHA512

      5894b800bea1bc71c0332e8b8fcb97a0c82554a06ede0cbb9458037da832fa6230eb5ea3256d54c21918228f83f9eb4a8cb9c1c895dc537849f40d6d6c527073

    • SSDEEP

      24576:WMWC0TqIeXhS6naoWo30fK9r/mOjLoQXSP:LgqIeXhPaTkoW/mOLHXA

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks