Overview

overview

10

Static

static

fecd649cc1...69.exe

windows7-x64

10

fecd649cc1...69.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fecd649cc13ddfc4aa0f610a64c9c860d7fb05e7fc41a2d3614b73a736976e69

  • Size

    172KB

  • Sample

    221205-x972xscf2s

  • MD5

    f32d61589ec6874ebe2bf1de2feb5548

  • SHA1

    3b494bfe93a3ca09aeba2779756df37c2ceff4e3

  • SHA256

    fecd649cc13ddfc4aa0f610a64c9c860d7fb05e7fc41a2d3614b73a736976e69

  • SHA512

    4d5f050d28fe2cd24150f6a04a6e05fd57b3c9ab928493d09338b30592dacda67f5aaea5d89e323384e46140ffbf22525d876bb3b5b84c0188fb0ac50fbabfad

  • SSDEEP

    3072:Pgqw8WIL6q4hrpvB5KMcpnK2W5HoA9jtxG6fgYA31UBrKws:Pgqw8WIL6nxdKM2KfHHjnIxOBDs

Score
10/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      fecd649cc13ddfc4aa0f610a64c9c860d7fb05e7fc41a2d3614b73a736976e69

    • Size

      172KB

    • MD5

      f32d61589ec6874ebe2bf1de2feb5548

    • SHA1

      3b494bfe93a3ca09aeba2779756df37c2ceff4e3

    • SHA256

      fecd649cc13ddfc4aa0f610a64c9c860d7fb05e7fc41a2d3614b73a736976e69

    • SHA512

      4d5f050d28fe2cd24150f6a04a6e05fd57b3c9ab928493d09338b30592dacda67f5aaea5d89e323384e46140ffbf22525d876bb3b5b84c0188fb0ac50fbabfad

    • SSDEEP

      3072:Pgqw8WIL6q4hrpvB5KMcpnK2W5HoA9jtxG6fgYA31UBrKws:Pgqw8WIL6nxdKM2KfHHjnIxOBDs

    Score
    10/10
    persistencespywarestealerupx

    • Modifies WinLogon for persistence

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks