Overview

overview

8

Static

static

3

ZYKUFlashe...3b.exe

windows10-1703-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    ZYKUFlasher-v-EexsHuwRjG3b.exe

  • Size

    5.5MB

  • Sample

    230820-l4khwsga4s

  • MD5

    cce3edffa46ad5c105ca1410939ce31c

  • SHA1

    360bd6ba0d7854daa49b95b1dcc6cc0c11dafa5d

  • SHA256

    9245e604979cb9667e1315086089817ac0e56d207fdb35acea6dea4ed74b689c

  • SHA512

    a3d97cd42f2a766a8baf2daf7f1c404c3ad28470be5ebe42e9df33647a9cd6410cadfa3e13e9017104d66cdd13b7a2a59a58e31a123c46ee7a8a93e1b72b12b3

  • SSDEEP

    98304:IiXBmRLF8oi85sXgCqidOfYdkpp8bXrft/nQkP/tN3zkF6yoBzw0/rku:RXPjgCgrfN8bXR/Q4/zkFToBsirN

Score
8/10
spywarestealerupx

Malware Config

Targets

    • Target

      ZYKUFlasher-v-EexsHuwRjG3b.exe

    • Size

      5.5MB

    • MD5

      cce3edffa46ad5c105ca1410939ce31c

    • SHA1

      360bd6ba0d7854daa49b95b1dcc6cc0c11dafa5d

    • SHA256

      9245e604979cb9667e1315086089817ac0e56d207fdb35acea6dea4ed74b689c

    • SHA512

      a3d97cd42f2a766a8baf2daf7f1c404c3ad28470be5ebe42e9df33647a9cd6410cadfa3e13e9017104d66cdd13b7a2a59a58e31a123c46ee7a8a93e1b72b12b3

    • SSDEEP

      98304:IiXBmRLF8oi85sXgCqidOfYdkpp8bXrft/nQkP/tN3zkF6yoBzw0/rku:RXPjgCgrfN8bXR/Q4/zkFToBsirN

    Score
    8/10
    spywarestealerupx

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks