be518551ddb6d1701116fd7b35f534f32387e7e565964a473a84fdd347fe84ae | Triage

Sharing

General

Target

be518551ddb6d1701116fd7b35f534f32387e7e565964a473a84fdd347fe84ae
Size

848KB
Sample

221201-jgxhtsgc77
MD5

7da245c4cd22af813133093147e3995e
SHA1

747144965a63f811d0de518e6e06382fbc3b1a1b
SHA256

be518551ddb6d1701116fd7b35f534f32387e7e565964a473a84fdd347fe84ae
SHA512

3de765502cf400db900673e9612a1eaf58834c3e91075536a4423d0ebf153095dd296167ab330ea97265a2762fe10df752e9abd0eb2b01a54d2ee3f2f3e8243f
SSDEEP

24576:79LQhE1oy4nqW9wV1KjIkyIaFXIx33rwDVs922k:75oy4qW983rLXU/25

Score

8^/10

discovery persistence spyware stealer upx

Malware Config

Targets

- Target
  
  be518551ddb6d1701116fd7b35f534f32387e7e565964a473a84fdd347fe84ae
- Size
  
  848KB
- MD5
  
  7da245c4cd22af813133093147e3995e
- SHA1
  
  747144965a63f811d0de518e6e06382fbc3b1a1b
- SHA256
  
  be518551ddb6d1701116fd7b35f534f32387e7e565964a473a84fdd347fe84ae
- SHA512
  
  3de765502cf400db900673e9612a1eaf58834c3e91075536a4423d0ebf153095dd296167ab330ea97265a2762fe10df752e9abd0eb2b01a54d2ee3f2f3e8243f
- SSDEEP
  
  24576:79LQhE1oy4nqW9wV1KjIkyIaFXIx33rwDVs922k:75oy4qW983rLXU/25
Score

8^/10

discovery persistence spyware stealer upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealerupx

behavioral2