Overview

overview

8

Static

static

d20c1eb17d...15.exe

windows7-x64

8

d20c1eb17d...15.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d20c1eb17da6df69b81ac1726f0a9579f3dcd3078751a728a82cf45c257bfe15

  • Size

    819KB

  • Sample

    221206-1w2jrsgd66

  • MD5

    c4fe4565180552e74d9c6d1531877e5e

  • SHA1

    23e03ea270792ad692112d742e3a82dc9174d1c0

  • SHA256

    d20c1eb17da6df69b81ac1726f0a9579f3dcd3078751a728a82cf45c257bfe15

  • SHA512

    76291059be1d8970e680dbd17b26db9daaaa5d8e304a74d932d73fc19864034ebfd010e0a8a5098d29bc4cf5d916898e0c8288867d048ab06ab99d243e51d194

  • SSDEEP

    24576:DuaGkaGoVu6y7BdAQxnCyFftJqx5h25LAk:Dq5GoVGBbxCyFf7q25R

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      d20c1eb17da6df69b81ac1726f0a9579f3dcd3078751a728a82cf45c257bfe15

    • Size

      819KB

    • MD5

      c4fe4565180552e74d9c6d1531877e5e

    • SHA1

      23e03ea270792ad692112d742e3a82dc9174d1c0

    • SHA256

      d20c1eb17da6df69b81ac1726f0a9579f3dcd3078751a728a82cf45c257bfe15

    • SHA512

      76291059be1d8970e680dbd17b26db9daaaa5d8e304a74d932d73fc19864034ebfd010e0a8a5098d29bc4cf5d916898e0c8288867d048ab06ab99d243e51d194

    • SSDEEP

      24576:DuaGkaGoVu6y7BdAQxnCyFftJqx5h25LAk:Dq5GoVGBbxCyFf7q25R

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks