Overview

overview

8

Static

static

b6a51a7c91...5c.exe

windows7-x64

8

b6a51a7c91...5c.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    b6a51a7c917cfa8e6c68839cc8238ecc1618b4362a59ee02a4572f2deb8bbd5c

  • Size

    39KB

  • Sample

    221203-r3j4made2s

  • MD5

    658f1bb2ac573cc68d92e44b8d18bba5

  • SHA1

    93c1a509a894f6506dd5fb1c7025b85c7359dbb3

  • SHA256

    b6a51a7c917cfa8e6c68839cc8238ecc1618b4362a59ee02a4572f2deb8bbd5c

  • SHA512

    c6c0af16f31850845ac9cc9e729027a6bdf9d09229e705ac87706503d6919dda498d0f77d3c40bcc33e43c44ab2e1696caa74ff74d0a5e90ff10d3509e8ede7f

  • SSDEEP

    768:swtMxfUQQGh9DNbLN3V53WyYB1ZWdJmYwjWK:s0KU69DNPN3+qml

Score
8/10
evasionspywarestealertrojanupx

Malware Config

Targets

    • Target

      b6a51a7c917cfa8e6c68839cc8238ecc1618b4362a59ee02a4572f2deb8bbd5c

    • Size

      39KB

    • MD5

      658f1bb2ac573cc68d92e44b8d18bba5

    • SHA1

      93c1a509a894f6506dd5fb1c7025b85c7359dbb3

    • SHA256

      b6a51a7c917cfa8e6c68839cc8238ecc1618b4362a59ee02a4572f2deb8bbd5c

    • SHA512

      c6c0af16f31850845ac9cc9e729027a6bdf9d09229e705ac87706503d6919dda498d0f77d3c40bcc33e43c44ab2e1696caa74ff74d0a5e90ff10d3509e8ede7f

    • SSDEEP

      768:swtMxfUQQGh9DNbLN3V53WyYB1ZWdJmYwjWK:s0KU69DNPN3+qml

    Score
    8/10
    evasionspywarestealertrojanupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks whether UAC is enabled

      evasiontrojan

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks