Overview

overview

8

Static

static

46a6027dc4...b1.exe

windows7-x64

8

46a6027dc4...b1.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    46a6027dc4b57ea07e9299b8d3c9ffbe4e895e2b7120786fd7a0a36ec8235ab1

  • Size

    179KB

  • Sample

    221201-fc6zxsac6v

  • MD5

    2208f921d0ddf3c35460da004e04be25

  • SHA1

    c75366c98e866ec513885e0bdd312fbe4129ac8a

  • SHA256

    46a6027dc4b57ea07e9299b8d3c9ffbe4e895e2b7120786fd7a0a36ec8235ab1

  • SHA512

    8291dd45d2d29ef51b83e427f86217ea0145ab588e0cdbbfde519d33847b37748f00759f722e5ff9253687ba02038295e22fb913453d83423a26091d382fa419

  • SSDEEP

    3072:BD7aNwYZLE37VXSuHuzVJKQDZ1txF5A36BgosKM3g/CP4oxX4v2:BD7abE3xXq3KQdHxzvjxaP7A2

Score
8/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      46a6027dc4b57ea07e9299b8d3c9ffbe4e895e2b7120786fd7a0a36ec8235ab1

    • Size

      179KB

    • MD5

      2208f921d0ddf3c35460da004e04be25

    • SHA1

      c75366c98e866ec513885e0bdd312fbe4129ac8a

    • SHA256

      46a6027dc4b57ea07e9299b8d3c9ffbe4e895e2b7120786fd7a0a36ec8235ab1

    • SHA512

      8291dd45d2d29ef51b83e427f86217ea0145ab588e0cdbbfde519d33847b37748f00759f722e5ff9253687ba02038295e22fb913453d83423a26091d382fa419

    • SSDEEP

      3072:BD7aNwYZLE37VXSuHuzVJKQDZ1txF5A36BgosKM3g/CP4oxX4v2:BD7abE3xXq3KQdHxzvjxaP7A2

    Score
    8/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks