5049de4c58ea923723389e4d732f1c134dc38582971f4872593e1153db945078 | Triage

Sharing

General

Target

HuyNTVideo.exe.malware
Size

314.8MB
Sample

230130-pl42csac69
MD5

2537d96011fc12adbd3814700f73ba86
SHA1

77c0870b22138eac4e44f559e2f684c58d53c345
SHA256

5049de4c58ea923723389e4d732f1c134dc38582971f4872593e1153db945078
SHA512

c6883ff0c119f1ea6cbdbdcb7d10dc54200fccc4e52f0f8e31beb1107658342a1d35495696e818b0f4d64dabef2a11435ca5fe9930d17d9d936ddf663fdbbc19
SSDEEP

393216:BgwQpSMi96IB8AQPjluYUtoOOzSpVM5EKg70xV3DAii:BgwQpVi96JAQMAcbc/i

Score

8^/10

spyware stealer upx

Malware Config

Targets

- Target
  
  HuyNTVideo.exe.malware
- Size
  
  314.8MB
- MD5
  
  2537d96011fc12adbd3814700f73ba86
- SHA1
  
  77c0870b22138eac4e44f559e2f684c58d53c345
- SHA256
  
  5049de4c58ea923723389e4d732f1c134dc38582971f4872593e1153db945078
- SHA512
  
  c6883ff0c119f1ea6cbdbdcb7d10dc54200fccc4e52f0f8e31beb1107658342a1d35495696e818b0f4d64dabef2a11435ca5fe9930d17d9d936ddf663fdbbc19
- SSDEEP
  
  393216:BgwQpSMi96IB8AQPjluYUtoOOzSpVM5EKg70xV3DAii:BgwQpVi96JAQMAcbc/i
Score

8^/10

upx spyware stealer
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops startup file
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2
- Target
  
  out.upx
- Size
  
  402KB
- MD5
  
  9ebb1e6c80e0e17914aa3c0887f79fc6
- SHA1
  
  b2fe1dbfb1b110c67cc0d5cac0579e44755dd6f0
- SHA256
  
  6af29aec38b52febd116f93dbc65d80c16c3e7a610e3ace521e3f13ce66cc183
- SHA512
  
  337d28b69bc1e23c067531eb11ed4c922a2c665b14ad24479b5168568b807e33f1170cf36d1f3135cc4309a76202219ff18fcbe40660725b459a954a67fdaacc
- SSDEEP
  
  3072:XuiZM5HwaKFHWWU9QyCtxjGDsNz99kWrUst4BHFa9ox9ecJPK5u2i76:NYH8WWiQyoNBz99kWAtxscJPK5t
Score

1^/10
behavioral3 behavioral4

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

spywarestealerupx

behavioral3

behavioral4