Overview

overview

8

Static

static

fd9436ffac...ee.exe

windows7-x64

8

fd9436ffac...ee.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    fd9436ffac9eaefd986dba565c86de3df6814ae78f56aa08fd29f973ee02b6ee

  • Size

    920KB

  • Sample

    221206-yp1msahc63

  • MD5

    24af406e91c2257cb8a9cdeaf180b9b0

  • SHA1

    a6b719aa46320f1ee1865ce4a006e8d421a2b584

  • SHA256

    fd9436ffac9eaefd986dba565c86de3df6814ae78f56aa08fd29f973ee02b6ee

  • SHA512

    b3c7a68e24d9a4c582ac2e38762a0143cd767da9de099a4cf5498e140894c2c81c3eb63d991d3eac738c2388b77ed005486cf97fdebec81a425ccd085012e93f

  • SSDEEP

    24576:2o+dWwJMmiqPLyqG+Af+mEAIH14c75W/j2OnMU01m:2vhPvPLHZAZE77ErRn

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      fd9436ffac9eaefd986dba565c86de3df6814ae78f56aa08fd29f973ee02b6ee

    • Size

      920KB

    • MD5

      24af406e91c2257cb8a9cdeaf180b9b0

    • SHA1

      a6b719aa46320f1ee1865ce4a006e8d421a2b584

    • SHA256

      fd9436ffac9eaefd986dba565c86de3df6814ae78f56aa08fd29f973ee02b6ee

    • SHA512

      b3c7a68e24d9a4c582ac2e38762a0143cd767da9de099a4cf5498e140894c2c81c3eb63d991d3eac738c2388b77ed005486cf97fdebec81a425ccd085012e93f

    • SSDEEP

      24576:2o+dWwJMmiqPLyqG+Af+mEAIH14c75W/j2OnMU01m:2vhPvPLHZAZE77ErRn

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks