Overview

overview

8

Static

static

9037ab8e61...9c.exe

windows7-x64

8

9037ab8e61...9c.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    9037ab8e61bad4bf41d20a72d57259a7c72600f950b841f72eae3ae854969e9c

  • Size

    820KB

  • Sample

    221206-ps3f4shd66

  • MD5

    9e67128632cb5fa7dc56d1dfc3a3455f

  • SHA1

    e986988c54bc7f531ceba26e401c479b65c40eae

  • SHA256

    9037ab8e61bad4bf41d20a72d57259a7c72600f950b841f72eae3ae854969e9c

  • SHA512

    eb0b8658f69855d783cd387220c8caa00a08ea3c6b66138f7ae4d1a7111ae2dc814cb306fd374919537e619922c2ddaaec8660dac6150b05344dd0fe114c9460

  • SSDEEP

    12288:HFWiaPkToGrnb4o6rSsf60oZaOzvPAeDxx00iCsZuKWYLReWGFk+0DLDZkXeuIOE:0i3vrbMwPA+xx3iCs8jHNFivDCBIF86

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      9037ab8e61bad4bf41d20a72d57259a7c72600f950b841f72eae3ae854969e9c

    • Size

      820KB

    • MD5

      9e67128632cb5fa7dc56d1dfc3a3455f

    • SHA1

      e986988c54bc7f531ceba26e401c479b65c40eae

    • SHA256

      9037ab8e61bad4bf41d20a72d57259a7c72600f950b841f72eae3ae854969e9c

    • SHA512

      eb0b8658f69855d783cd387220c8caa00a08ea3c6b66138f7ae4d1a7111ae2dc814cb306fd374919537e619922c2ddaaec8660dac6150b05344dd0fe114c9460

    • SSDEEP

      12288:HFWiaPkToGrnb4o6rSsf60oZaOzvPAeDxx00iCsZuKWYLReWGFk+0DLDZkXeuIOE:0i3vrbMwPA+xx3iCs8jHNFivDCBIF86

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks