Overview

overview

10

Static

static

b81655ea9a...51.exe

windows7-x64

10

b81655ea9a...51.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b81655ea9af8e4bb764729a3ba829e0616ed7c35b635be37d23ef05ae554ed51

  • Size

    172KB

  • Sample

    221205-g819zsdd56

  • MD5

    28f7f2bc90dc745d0513ed262d35fbfb

  • SHA1

    a468eb5df62bac640850770c6c904a017d86d73f

  • SHA256

    b81655ea9af8e4bb764729a3ba829e0616ed7c35b635be37d23ef05ae554ed51

  • SHA512

    791b2e52a01a1cbfa77e3537b3ff2405d165b74522bb6675cb18442ed1848cfd384996a61431536480a2da26e9f6bad7dedcd5953089da944f54d1ee17569b56

  • SSDEEP

    3072:wb/AhChWboSLXPlpCJLgRY1HGE/RLGK8y/h7YbN30YLWZ1+lxQH:u/DkboSzlpugRY1FJz8ylYR/6ulw

Score
10/10
evasionpersistencespywarestealerupx

Malware Config

Targets

    • Target

      b81655ea9af8e4bb764729a3ba829e0616ed7c35b635be37d23ef05ae554ed51

    • Size

      172KB

    • MD5

      28f7f2bc90dc745d0513ed262d35fbfb

    • SHA1

      a468eb5df62bac640850770c6c904a017d86d73f

    • SHA256

      b81655ea9af8e4bb764729a3ba829e0616ed7c35b635be37d23ef05ae554ed51

    • SHA512

      791b2e52a01a1cbfa77e3537b3ff2405d165b74522bb6675cb18442ed1848cfd384996a61431536480a2da26e9f6bad7dedcd5953089da944f54d1ee17569b56

    • SSDEEP

      3072:wb/AhChWboSLXPlpCJLgRY1HGE/RLGK8y/h7YbN30YLWZ1+lxQH:u/DkboSzlpugRY1FJz8ylYR/6ulw

    Score
    10/10
    evasionpersistencespywarestealerupx

    • Modifies security service

      evasion

    • Disables taskbar notifications via registry modification

      evasion

    • Modifies Installed Components in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks