Overview

overview

8

Static

static

c6b5287539...ad.exe

windows7-x64

8

c6b5287539...ad.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    c6b52875397d674d836d93c1f2a3942f9be7630126a82ba937b24f72a64a23ad

  • Size

    172KB

  • Sample

    221207-bqeqdabh96

  • MD5

    1f45cbf933e418203e048047a41ae240

  • SHA1

    55206c99a8e726e8586243822498e217dc4e20e6

  • SHA256

    c6b52875397d674d836d93c1f2a3942f9be7630126a82ba937b24f72a64a23ad

  • SHA512

    a72c84b2d3bdd525bee83ec8b888b4c1eb1944f848f2adcc59c4c973856cbc06878b769e60d143798a4a27488b4df26882d7d7e8e7416e298cef009a41acb8a8

  • SSDEEP

    3072:5zNWMKKRZYchObK91C8sV6Xmoo4LEpYC8iJkbsmOW9gEY2AaJr7UJztWQaN0H9H0:5ZuuObR8sVImcyYC5J6s9W9gcCKmH9K9

Score
8/10
adwarestealerupx

Malware Config

Targets

    • Target

      c6b52875397d674d836d93c1f2a3942f9be7630126a82ba937b24f72a64a23ad

    • Size

      172KB

    • MD5

      1f45cbf933e418203e048047a41ae240

    • SHA1

      55206c99a8e726e8586243822498e217dc4e20e6

    • SHA256

      c6b52875397d674d836d93c1f2a3942f9be7630126a82ba937b24f72a64a23ad

    • SHA512

      a72c84b2d3bdd525bee83ec8b888b4c1eb1944f848f2adcc59c4c973856cbc06878b769e60d143798a4a27488b4df26882d7d7e8e7416e298cef009a41acb8a8

    • SSDEEP

      3072:5zNWMKKRZYchObK91C8sV6Xmoo4LEpYC8iJkbsmOW9gEY2AaJr7UJztWQaN0H9H0:5ZuuObR8sVImcyYC5J6s9W9gcCKmH9K9

    Score
    8/10
    adwarestealerupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks