Overview

overview

8

Static

static

file.exe

windows7-x64

8

file.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    file.exe

  • Size

    8.0MB

  • Sample

    221220-lqhgdahb73

  • MD5

    4c97bff6c6e80a0d5af1c558832c48cc

  • SHA1

    cc2aad2afd63c3bea2ebd7c745346105bd79c863

  • SHA256

    146e6319be1d5232df22fe3911f3d447ed69a4db820971723ccd39f4ef868a27

  • SHA512

    1523fb45ad116638adf7bc1f99f83eab1944bb4f15c964ba0a8216b935114c472f7845f6935d4371506e48d44dfd2b6028b5d282a72f009f153d6fce8c432ae1

  • SSDEEP

    98304:hTCdbfDZzWfI4gd+Bl59vkwjpwKNjtbMj/oKMZVaLzp:lYr1uI4gd+T3d5bqhpx

Score
8/10
spywarestealerupx

Malware Config

Targets

    • Target

      file.exe

    • Size

      8.0MB

    • MD5

      4c97bff6c6e80a0d5af1c558832c48cc

    • SHA1

      cc2aad2afd63c3bea2ebd7c745346105bd79c863

    • SHA256

      146e6319be1d5232df22fe3911f3d447ed69a4db820971723ccd39f4ef868a27

    • SHA512

      1523fb45ad116638adf7bc1f99f83eab1944bb4f15c964ba0a8216b935114c472f7845f6935d4371506e48d44dfd2b6028b5d282a72f009f153d6fce8c432ae1

    • SSDEEP

      98304:hTCdbfDZzWfI4gd+Bl59vkwjpwKNjtbMj/oKMZVaLzp:lYr1uI4gd+T3d5bqhpx

    Score
    8/10
    upxspywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Accesses 2FA software files, possible credential harvesting

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks