Overview

overview

8

Static

static

79f5b1dd83...f4.exe

windows7-x64

8

79f5b1dd83...f4.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    79f5b1dd83ef94b3260101141c7b3e05aadfd0f9c6b7ce1cf634ce01f8f786f4

  • Size

    793KB

  • Sample

    221201-dg9khahc66

  • MD5

    0340c2db4ca4956876b270068ace838c

  • SHA1

    cdce1dfd684b62221049d9d691ab1828c9e2e4cd

  • SHA256

    79f5b1dd83ef94b3260101141c7b3e05aadfd0f9c6b7ce1cf634ce01f8f786f4

  • SHA512

    eae544d1e6e107562e228688792e98ba6bc6fff1e8e9796859a9c0d294ceb4fcee1be0388be9402e8655a5d60319dbe325e74fb9b55224c917ef0a923bab0bbd

  • SSDEEP

    24576:mrfzcm0iXQXtm3TBN940J7B4lwinTbKfODgMycnBf8:mzzTXv3TvS038wiTbKfODgeBf

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      79f5b1dd83ef94b3260101141c7b3e05aadfd0f9c6b7ce1cf634ce01f8f786f4

    • Size

      793KB

    • MD5

      0340c2db4ca4956876b270068ace838c

    • SHA1

      cdce1dfd684b62221049d9d691ab1828c9e2e4cd

    • SHA256

      79f5b1dd83ef94b3260101141c7b3e05aadfd0f9c6b7ce1cf634ce01f8f786f4

    • SHA512

      eae544d1e6e107562e228688792e98ba6bc6fff1e8e9796859a9c0d294ceb4fcee1be0388be9402e8655a5d60319dbe325e74fb9b55224c917ef0a923bab0bbd

    • SSDEEP

      24576:mrfzcm0iXQXtm3TBN940J7B4lwinTbKfODgMycnBf8:mzzTXv3TvS038wiTbKfODgeBf

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks