Overview

overview

7

Static

static

3

PC Optimization.rar

windows7-x64

PC Optimization.rar

windows10-2004-x64

3

PC Optimiz...on.exe

windows7-x64

7

PC Optimiz...on.exe

windows10-2004-x64

7

PC Optimiz...ogo.py

windows7-x64

3

PC Optimiz...ogo.py

windows10-2004-x64

3

PC Optimiz...co.ico

windows7-x64

1

PC Optimiz...co.ico

windows10-2004-x64

3

PC Optimiz...co.png

windows7-x64

1

PC Optimiz...co.png

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    PC Optimization.rar

  • Size

    17.6MB

  • Sample

    230331-1fzp8sdf59

  • MD5

    98ea36ff977467b74d54730f59c4a866

  • SHA1

    ccb4f5abf676e970d7582bc76aa9f96e454f31e5

  • SHA256

    14322770226ff226c95b06ac17f73b122fcff5f4a7e2a987be0fd88cfd6ff004

  • SHA512

    ff2a43d7b24ddb4db2e2a597e96c1acc32d13a5332f95a63fca62e50f3d0862cfb18222d1d87d64563234c1ccf2a43175a9940f3702b2079090220e54971267a

  • SSDEEP

    393216:fuWv4O3qd5dzGKGaStv8biN4/lATAZ2ZzL1S2HdUFd7ezunlHRkMnS:fuWvxqNStGi9S2HFFaMgS

Score
7/10
persistencepyinstallerspywarestealerupx

Malware Config

Targets

    • Target

      PC Optimization.rar

    • Size

      17.6MB

    • MD5

      98ea36ff977467b74d54730f59c4a866

    • SHA1

      ccb4f5abf676e970d7582bc76aa9f96e454f31e5

    • SHA256

      14322770226ff226c95b06ac17f73b122fcff5f4a7e2a987be0fd88cfd6ff004

    • SHA512

      ff2a43d7b24ddb4db2e2a597e96c1acc32d13a5332f95a63fca62e50f3d0862cfb18222d1d87d64563234c1ccf2a43175a9940f3702b2079090220e54971267a

    • SSDEEP

      393216:fuWv4O3qd5dzGKGaStv8biN4/lATAZ2ZzL1S2HdUFd7ezunlHRkMnS:fuWvxqNStGi9S2HFFaMgS

    Score
    3/10
    behavioral1behavioral2

    • Target

      PC Optimization/PC Optimization.exe

    • Size

      17.7MB

    • MD5

      8b22dc9a94e199fafc45177146be992f

    • SHA1

      8429fa616e37ee3009a6e795ad7f32cb4d361a5e

    • SHA256

      15e0e6ab9754e81768b0f7816f490d3a365b740ca412d3b342c74833f4b5b507

    • SHA512

      7a7d657d5efaef3ce8e271a7a15aab652fb08954bc526d4393f474eab40909ac4ebb95c99f28c81f9e0a75343f2f008b506a8e669e4ddc2d280fcd6228f849a8

    • SSDEEP

      393216:VqPuYXJBLl0/m3pgDOEkSgsvSkWI4K9JtsCdJm:MPuYXJBiKlA690e

    Score
    7/10
    upxpersistencespywarestealer

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral3behavioral4

    • Target

      PC Optimization/logo.py

    • Size

      1KB

    • MD5

      15ab9ddf66a0bae33205de406beba8fc

    • SHA1

      9a3349bd9bea72d53819bee8a0e47f75479ab795

    • SHA256

      17571b91d06045f7eee16acca0973b986a7d058b1b396ab7dc176a7b93c65a69

    • SHA512

      58bb2290223ff75b39294b772ccef14b5d3eb2ac800261f512a08fc13883ffa801b424854ee4ee3a2d8095966ebefc93bf9b548d720bb7a4ad542cf9b316e8f5

    Score
    3/10
    behavioral5behavioral6

    • Target

      PC Optimization/pcico.ico

    • Size

      100KB

    • MD5

      13ad2e09d6f779714e5d27d087cb51b5

    • SHA1

      b20d791ac6c46cea2648baf4ac8fdd4e9a31fb37

    • SHA256

      f5ab618618a9f8a3c445cd9295a3dbff5745aefbb927d249f093c6a7a749350b

    • SHA512

      78d4457d1a39fa0c249ec96fc88e965da0b30ad5bd6f5b30ebb1d0330e7499c5facae6e3837f417238153f13a3a04aec648f2c5a7a0223b1134e3dc618626d59

    • SSDEEP

      192:rOMPrNd+NMPBWO1Prf+KeuTYbWT6tlrJkYU49i04oTgxC21v7T6l36X6sjxRZ:96MwM+KX8481RUQ4oiO3M6sjxRZ

    Score
    3/10
    behavioral7behavioral8

    • Target

      PC Optimization/pcico.png

    • Size

      12KB

    • MD5

      4189ee776d19052ffdb3b183ddad3a80

    • SHA1

      eca4a727814248fe523b6f9a55123e44efc6736d

    • SHA256

      19f81dd3de6116474d90937a76ef307827a1863115f6713ed9121e59f455f77b

    • SHA512

      9576253f0698ff07792c899d3dd482680963ba35294b8fa759d7195701c407c8aca386105f094e2a5062f99c0c5666ac4bb283cbd6fc709a8943d4aa9d0bf6de

    • SSDEEP

      384:+ySv4fkTPWZPCS7QEmMLhAjak/dWPJAOb/WQq:+B45PnyKhGakVWP5rbq

    Score
    3/10
    behavioral10behavioral9

MITRE ATT&CK Enterprise v6

Tasks