b6d22d0c4102bc4dd6cd346910dda5c9d72c27d11c55538bbae2874996b87ef5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6d22d0c4102bc4dd6cd346910dda5c9d72c27d11c55538bbae2874996b87ef5
Size

818KB
Sample

221206-ykakssbe7y
MD5

9ffff5b52089db15a0817da44666a66a
SHA1

6388ff711c2fc532390384b66bcd21a8887ff4ac
SHA256

b6d22d0c4102bc4dd6cd346910dda5c9d72c27d11c55538bbae2874996b87ef5
SHA512

653e5b878f70aa4e09771bf5df5e806aa8158354a95013c12f33eff4f53e22d163a8bc3a6fbef0bace14fa086917f703dee72ae63c1b469e3c3e4ed0c13fcea6
SSDEEP

24576:KuGbPsZ1H43TB1JV+zl9R8RYfnS0S5ktDVY8P1:+Ls743HH+B9yRYfS0Kkt68P1

Score

8^/10

discovery persistence spyware stealer upx

Malware Config

Targets

- Target
  
  b6d22d0c4102bc4dd6cd346910dda5c9d72c27d11c55538bbae2874996b87ef5
- Size
  
  818KB
- MD5
  
  9ffff5b52089db15a0817da44666a66a
- SHA1
  
  6388ff711c2fc532390384b66bcd21a8887ff4ac
- SHA256
  
  b6d22d0c4102bc4dd6cd346910dda5c9d72c27d11c55538bbae2874996b87ef5
- SHA512
  
  653e5b878f70aa4e09771bf5df5e806aa8158354a95013c12f33eff4f53e22d163a8bc3a6fbef0bace14fa086917f703dee72ae63c1b469e3c3e4ed0c13fcea6
- SSDEEP
  
  24576:KuGbPsZ1H43TB1JV+zl9R8RYfnS0S5ktDVY8P1:+Ls743HH+B9yRYfS0Kkt68P1
Score

8^/10

discovery persistence spyware stealer upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealerupx

behavioral2