Overview

overview

8

Static

static

7

aa715a9102...3a.exe

windows7-x64

8

aa715a9102...3a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa715a9102b989bb786c275a1d51b699f67f1784deb97dab302a25cac336293a

  • Size

    1.8MB

  • Sample

    230215-db1emshc8y

  • MD5

    73c4d0ca3acaeb23e13a464fef624e98

  • SHA1

    3c996fe2a908354ea9662838becb89cf3ca9c155

  • SHA256

    aa715a9102b989bb786c275a1d51b699f67f1784deb97dab302a25cac336293a

  • SHA512

    2c0eb8024f4cc133fdee82e5467fda6140a9a722767fa17df5a37637b516cf3be56ca3b61f5cde328e9493059fc8620d6e5a8c7cf13f69c896be5f1c6c41bc02

  • SSDEEP

    49152:p9wUEFRw9VLuHC80pMbK3h6Lh/JY/RIb/8yQqrw5oqMpXjp:sJFRuVLuHcp73Ch+8VjrwGpTp

Score
8/10
spywarestealerupx

Malware Config

Targets

    • Target

      aa715a9102b989bb786c275a1d51b699f67f1784deb97dab302a25cac336293a

    • Size

      1.8MB

    • MD5

      73c4d0ca3acaeb23e13a464fef624e98

    • SHA1

      3c996fe2a908354ea9662838becb89cf3ca9c155

    • SHA256

      aa715a9102b989bb786c275a1d51b699f67f1784deb97dab302a25cac336293a

    • SHA512

      2c0eb8024f4cc133fdee82e5467fda6140a9a722767fa17df5a37637b516cf3be56ca3b61f5cde328e9493059fc8620d6e5a8c7cf13f69c896be5f1c6c41bc02

    • SSDEEP

      49152:p9wUEFRw9VLuHC80pMbK3h6Lh/JY/RIb/8yQqrw5oqMpXjp:sJFRuVLuHcp73Ch+8VjrwGpTp

    Score
    8/10
    spywarestealerupx

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks