Overview

overview

8

Static

static

d2682f2f2b...5a.exe

windows7-x64

8

d2682f2f2b...5a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d2682f2f2ba590628fe77deb4996d72f959b9e725aa125b68e1c4f34cab0b05a

  • Size

    816KB

  • Sample

    221206-yd22gaba8x

  • MD5

    5c641be4bfd4073dc1052232288ca2da

  • SHA1

    958cf482212d22b2dc94cfbaa42cfb7f7b089504

  • SHA256

    d2682f2f2ba590628fe77deb4996d72f959b9e725aa125b68e1c4f34cab0b05a

  • SHA512

    bb27eefa7ef96c4bc875e3c7352f495c645e6429aeb5afd51a5214d3ff6e6de62ca42d9b7809b321e039abe99fe051c3603d6e4b912316184d41b4dc6c690452

  • SSDEEP

    12288:Y8EYLUCtkVZTb/SncdOMEIbP2EfWyv+4A9QSIE/IUnQYs0uls3RHJMVrV9AUtNW:l1JkVF79v7Hfc4cuynG0uyBpfM

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      d2682f2f2ba590628fe77deb4996d72f959b9e725aa125b68e1c4f34cab0b05a

    • Size

      816KB

    • MD5

      5c641be4bfd4073dc1052232288ca2da

    • SHA1

      958cf482212d22b2dc94cfbaa42cfb7f7b089504

    • SHA256

      d2682f2f2ba590628fe77deb4996d72f959b9e725aa125b68e1c4f34cab0b05a

    • SHA512

      bb27eefa7ef96c4bc875e3c7352f495c645e6429aeb5afd51a5214d3ff6e6de62ca42d9b7809b321e039abe99fe051c3603d6e4b912316184d41b4dc6c690452

    • SSDEEP

      12288:Y8EYLUCtkVZTb/SncdOMEIbP2EfWyv+4A9QSIE/IUnQYs0uls3RHJMVrV9AUtNW:l1JkVF79v7Hfc4cuynG0uyBpfM

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks