Overview

overview

8

Static

static

6e658f0e17...14.exe

windows7-x64

8

6e658f0e17...14.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    6e658f0e17cce078173e95d69639da4c0b259a23ff320ca426a7920cba62f114

  • Size

    818KB

  • Sample

    221206-yyxx9acf9s

  • MD5

    24083ac143587071ef01ef03a8ecf14d

  • SHA1

    06b5b17fe06e7db1eb75ee654276d5ad6c71b5b3

  • SHA256

    6e658f0e17cce078173e95d69639da4c0b259a23ff320ca426a7920cba62f114

  • SHA512

    78f83562d96aa11b0d85e1db54cde47b6992e8592be213a4a0be5cadef73b39791dec7ee2568ec2592c21a126d601d3d66d4a3a1d516254f40d0baff9579f9dd

  • SSDEEP

    24576:0YRFo5yNIr0XykOktX44aeYBM9D8KKKCk:1RFo5y2YX1O044aeYg8KKl

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      6e658f0e17cce078173e95d69639da4c0b259a23ff320ca426a7920cba62f114

    • Size

      818KB

    • MD5

      24083ac143587071ef01ef03a8ecf14d

    • SHA1

      06b5b17fe06e7db1eb75ee654276d5ad6c71b5b3

    • SHA256

      6e658f0e17cce078173e95d69639da4c0b259a23ff320ca426a7920cba62f114

    • SHA512

      78f83562d96aa11b0d85e1db54cde47b6992e8592be213a4a0be5cadef73b39791dec7ee2568ec2592c21a126d601d3d66d4a3a1d516254f40d0baff9579f9dd

    • SSDEEP

      24576:0YRFo5yNIr0XykOktX44aeYBM9D8KKKCk:1RFo5y2YX1O044aeYg8KKl

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks