bf9511dff06a6a7b50145533d568b1a4945c6c42c4d760f9315c2735382b4a9b | Triage

Sharing

General

Target

bf9511dff06a6a7b50145533d568b1a4945c6c42c4d760f9315c2735382b4a9b
Size

193KB
Sample

221201-w3e7wsgb58
MD5

39ee1f643d75bcb871d587496e8d29b8
SHA1

49733f0eb6dc0f2a7885deab207fd79f254f8830
SHA256

bf9511dff06a6a7b50145533d568b1a4945c6c42c4d760f9315c2735382b4a9b
SHA512

3a14c24e4c276a0bb16b68a5874c81aaa2fae8c098443b38131c2f09d584b864aa2eb5da0225c87d636cee65d91a2d27e4eef7099fe63c20c6d36a4ffd96e805
SSDEEP

3072:s55JRcehHtSaj15ZIkpaUb5xYt+SUpdf2mKs79BOQW23WSZotmrL1:EKehQaxEkp5xSUXf2mKs79urtsL1

Score

10^/10

persistence spyware stealer upx

Malware Config

Targets

- Target
  
  bf9511dff06a6a7b50145533d568b1a4945c6c42c4d760f9315c2735382b4a9b
- Size
  
  193KB
- MD5
  
  39ee1f643d75bcb871d587496e8d29b8
- SHA1
  
  49733f0eb6dc0f2a7885deab207fd79f254f8830
- SHA256
  
  bf9511dff06a6a7b50145533d568b1a4945c6c42c4d760f9315c2735382b4a9b
- SHA512
  
  3a14c24e4c276a0bb16b68a5874c81aaa2fae8c098443b38131c2f09d584b864aa2eb5da0225c87d636cee65d91a2d27e4eef7099fe63c20c6d36a4ffd96e805
- SSDEEP
  
  3072:s55JRcehHtSaj15ZIkpaUb5xYt+SUpdf2mKs79BOQW23WSZotmrL1:EKehQaxEkp5xSUXf2mKs79urtsL1
Score

10^/10

persistence spyware stealer upx
- Modifies WinLogon for persistence
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealerupx

behavioral2