b95459b87c6635be0a6ee995179edd90468599b2fcb910ccfd5cda2b8c3d5c73 | Triage

Sharing

General

Target

b95459b87c6635be0a6ee995179edd90468599b2fcb910ccfd5cda2b8c3d5c73
Size

818KB
Sample

221206-kayyradc9s
MD5

dc2bd70e8738fab26fc909c4d120b619
SHA1

e9772a96c51cf60950a6860222f09a42ce23a0b9
SHA256

b95459b87c6635be0a6ee995179edd90468599b2fcb910ccfd5cda2b8c3d5c73
SHA512

3da57aa8c01bfe6c4a11125274b5368780d3017613788a272142af6d554a3fc1b82170ddd15cd64118e66dcc83ca114da0d068fb891df6eeed50974718fc66ed
SSDEEP

12288:bSDlYTw468tW6k/YjgUSDAOwggW5KfeAWiQ9b6fhKzyw0sj226lla0fnMoE:n68U6awgFbAVVfhFsj/yw0/

Score

8^/10

discovery persistence spyware stealer upx

Malware Config

Targets

- Target
  
  b95459b87c6635be0a6ee995179edd90468599b2fcb910ccfd5cda2b8c3d5c73
- Size
  
  818KB
- MD5
  
  dc2bd70e8738fab26fc909c4d120b619
- SHA1
  
  e9772a96c51cf60950a6860222f09a42ce23a0b9
- SHA256
  
  b95459b87c6635be0a6ee995179edd90468599b2fcb910ccfd5cda2b8c3d5c73
- SHA512
  
  3da57aa8c01bfe6c4a11125274b5368780d3017613788a272142af6d554a3fc1b82170ddd15cd64118e66dcc83ca114da0d068fb891df6eeed50974718fc66ed
- SSDEEP
  
  12288:bSDlYTw468tW6k/YjgUSDAOwggW5KfeAWiQ9b6fhKzyw0sj226lla0fnMoE:n68U6awgFbAVVfhFsj/yw0/
Score

8^/10

discovery persistence spyware stealer upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealerupx

behavioral2