Overview

overview

8

Static

static

95e3f4f602...2c.exe

windows7-x64

8

95e3f4f602...2c.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    95e3f4f6025dac6a4ded596317034a9d8bf5cabce77a275839461f27225dd92c

  • Size

    1.5MB

  • Sample

    221204-g9tljahg2z

  • MD5

    e5c93549755db73066fefa4ceb38b433

  • SHA1

    85f94157ed3934658e6d34aa7d69195b28597741

  • SHA256

    95e3f4f6025dac6a4ded596317034a9d8bf5cabce77a275839461f27225dd92c

  • SHA512

    3932bd347492296bda62ce93b92ea339687c1d155038c23a76b61387a80a0aca67e593cb64000e110e696ecc6d61ce330ad9549c563a2a5f48fc96e6e70fbeb8

  • SSDEEP

    24576:NIH1JUCwAYLnXIi9m2eY2AtrSp/9IiRi92Rt1HCrFJNz2OrLl2bSferGTE7Mvr98:u0Zmc2AMpV7i8dHC5DaOPkbSfw7Mj9qX

Score
8/10
spywarestealerupx

Malware Config

Targets

    • Target

      95e3f4f6025dac6a4ded596317034a9d8bf5cabce77a275839461f27225dd92c

    • Size

      1.5MB

    • MD5

      e5c93549755db73066fefa4ceb38b433

    • SHA1

      85f94157ed3934658e6d34aa7d69195b28597741

    • SHA256

      95e3f4f6025dac6a4ded596317034a9d8bf5cabce77a275839461f27225dd92c

    • SHA512

      3932bd347492296bda62ce93b92ea339687c1d155038c23a76b61387a80a0aca67e593cb64000e110e696ecc6d61ce330ad9549c563a2a5f48fc96e6e70fbeb8

    • SSDEEP

      24576:NIH1JUCwAYLnXIi9m2eY2AtrSp/9IiRi92Rt1HCrFJNz2OrLl2bSferGTE7Mvr98:u0Zmc2AMpV7i8dHC5DaOPkbSfw7Mj9qX

    Score
    8/10
    spywarestealerupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks