Overview

overview

8

Static

static

8ec0f4514b...04.exe

windows7-x64

8

8ec0f4514b...04.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    8ec0f4514b6fd47c468de688acfd10c7aa64e679179b7ec8b9e2dfb46bcf6604

  • Size

    814KB

  • Sample

    221206-ysjhnscc2w

  • MD5

    6f82e03619070c45416f98168aa5a80b

  • SHA1

    357d7a8ba39a7c665d4c5119c4a2ac6020c85bf7

  • SHA256

    8ec0f4514b6fd47c468de688acfd10c7aa64e679179b7ec8b9e2dfb46bcf6604

  • SHA512

    297504f3a7331ca233ca9d97e5ac8ab21e6a39d52cd1250a6187a1ee4a25aabc78c4fc9292577df560875cdb784508786216f0b7bd70577220027f67615428cb

  • SSDEEP

    24576:49H+8AsV9R7CuzhWsk8Cy6URtZV6dYkpqoPcvCU:49edoc0WskQR0P0v

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      8ec0f4514b6fd47c468de688acfd10c7aa64e679179b7ec8b9e2dfb46bcf6604

    • Size

      814KB

    • MD5

      6f82e03619070c45416f98168aa5a80b

    • SHA1

      357d7a8ba39a7c665d4c5119c4a2ac6020c85bf7

    • SHA256

      8ec0f4514b6fd47c468de688acfd10c7aa64e679179b7ec8b9e2dfb46bcf6604

    • SHA512

      297504f3a7331ca233ca9d97e5ac8ab21e6a39d52cd1250a6187a1ee4a25aabc78c4fc9292577df560875cdb784508786216f0b7bd70577220027f67615428cb

    • SSDEEP

      24576:49H+8AsV9R7CuzhWsk8Cy6URtZV6dYkpqoPcvCU:49edoc0WskQR0P0v

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks