Overview

overview

8

Static

static

51de34cfeb...4f.exe

windows7-x64

8

51de34cfeb...4f.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    51de34cfebfcfd2ec8f234bd0f5fdadd4d2c8c1ac04ed7711e93ce14536dbe4f

  • Size

    824KB

  • Sample

    221206-1xlvpsbb8t

  • MD5

    4b25be5175a23dc0f63c8fb265f511b8

  • SHA1

    74480a50a26dcda061114d937d3e6879a8a1d93f

  • SHA256

    51de34cfebfcfd2ec8f234bd0f5fdadd4d2c8c1ac04ed7711e93ce14536dbe4f

  • SHA512

    f4b175c8a10782d68964dce60757f2f82d7bd01e9cbb812776c345080090af6f53b441def4a37e91059386d81205dbd7537f4c16a53869e500cef97dc78f05a7

  • SSDEEP

    24576:9I46qX4fYL+MH1R8G51iTfjVzft7e5xNvUGhjxyrVKVLJTVZmykmr:9/z7VR8g1YDtuxNFhVLJAq

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      51de34cfebfcfd2ec8f234bd0f5fdadd4d2c8c1ac04ed7711e93ce14536dbe4f

    • Size

      824KB

    • MD5

      4b25be5175a23dc0f63c8fb265f511b8

    • SHA1

      74480a50a26dcda061114d937d3e6879a8a1d93f

    • SHA256

      51de34cfebfcfd2ec8f234bd0f5fdadd4d2c8c1ac04ed7711e93ce14536dbe4f

    • SHA512

      f4b175c8a10782d68964dce60757f2f82d7bd01e9cbb812776c345080090af6f53b441def4a37e91059386d81205dbd7537f4c16a53869e500cef97dc78f05a7

    • SSDEEP

      24576:9I46qX4fYL+MH1R8G51iTfjVzft7e5xNvUGhjxyrVKVLJTVZmykmr:9/z7VR8g1YDtuxNFhVLJAq

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks