Overview

overview

8

Static

static

7

923a55ed23...9f.exe

windows7-x64

8

923a55ed23...9f.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    923a55ed2358269706e1082c79ab37edffe88c86edac4a17c518b2e46b67bb9f

  • Size

    2.1MB

  • Sample

    230207-kp44baaf27

  • MD5

    04d79796199ba6251e39c0052dfb2a18

  • SHA1

    442a49c3535454a9326298e69e8ab6c60711645b

  • SHA256

    923a55ed2358269706e1082c79ab37edffe88c86edac4a17c518b2e46b67bb9f

  • SHA512

    1449985aeb4a3b088629a7d9115a1d48f174bd8315acfd4be9a37c2e0d73e9987eac5cff07d50c82e3c9c74f539f320d7bca7e49a7d77232875fe9d8d4ba50a9

  • SSDEEP

    49152:YXTKGWWn+fN3LFpqaGuHWhX9g3wYHqLREU026DhkI3SRYu0J0YuuLDjlFQCB:9GWWn+VZpguHqX9g3F2Rdq7iRT0JBdF7

Score
8/10
spywarestealerupx

Malware Config

Targets

    • Target

      923a55ed2358269706e1082c79ab37edffe88c86edac4a17c518b2e46b67bb9f

    • Size

      2.1MB

    • MD5

      04d79796199ba6251e39c0052dfb2a18

    • SHA1

      442a49c3535454a9326298e69e8ab6c60711645b

    • SHA256

      923a55ed2358269706e1082c79ab37edffe88c86edac4a17c518b2e46b67bb9f

    • SHA512

      1449985aeb4a3b088629a7d9115a1d48f174bd8315acfd4be9a37c2e0d73e9987eac5cff07d50c82e3c9c74f539f320d7bca7e49a7d77232875fe9d8d4ba50a9

    • SSDEEP

      49152:YXTKGWWn+fN3LFpqaGuHWhX9g3wYHqLREU026DhkI3SRYu0J0YuuLDjlFQCB:9GWWn+VZpguHqX9g3F2Rdq7iRT0JBdF7

    Score
    8/10
    spywarestealerupx

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks