Overview

overview

8

Static

static

b34ab856ab...7c.exe

windows7-x64

8

b34ab856ab...7c.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b34ab856ab57257c5cc5ada5a6c4ee0c262930a4684c7bb95d14a1ae938e607c

  • Size

    336KB

  • Sample

    221203-hwfyysea86

  • MD5

    2703c7d3eb0215a4815b6ebd6f07ff30

  • SHA1

    ad1f594838a20e4ba6149ce58567aab398da4b48

  • SHA256

    b34ab856ab57257c5cc5ada5a6c4ee0c262930a4684c7bb95d14a1ae938e607c

  • SHA512

    c650788768642f4ce0d623a5ded8709fde6c9c80d9e3c3e3256a308b628471bf2188895596a86938e505732bd83f2e3341944f4f8db562cf4d857ac30036fe7e

  • SSDEEP

    3072:EsU9b466/ySq/Q0zR+i74e8RCj1+3zEch3pNUfWJAcl8+IjO9jfkR5sCerpIAC8W:EL6/vH0lIe8QY35h3pNFTIjSIPOC8

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      b34ab856ab57257c5cc5ada5a6c4ee0c262930a4684c7bb95d14a1ae938e607c

    • Size

      336KB

    • MD5

      2703c7d3eb0215a4815b6ebd6f07ff30

    • SHA1

      ad1f594838a20e4ba6149ce58567aab398da4b48

    • SHA256

      b34ab856ab57257c5cc5ada5a6c4ee0c262930a4684c7bb95d14a1ae938e607c

    • SHA512

      c650788768642f4ce0d623a5ded8709fde6c9c80d9e3c3e3256a308b628471bf2188895596a86938e505732bd83f2e3341944f4f8db562cf4d857ac30036fe7e

    • SSDEEP

      3072:EsU9b466/ySq/Q0zR+i74e8RCj1+3zEch3pNUfWJAcl8+IjO9jfkR5sCerpIAC8W:EL6/vH0lIe8QY35h3pNFTIjSIPOC8

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks