Overview

overview

8

Static

static

7

3828c19bbf...9a.exe

windows7-x64

7

3828c19bbf...9a.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    3828c19bbfe0b5d91260c9a2e989cc3f8f8a90ab8791793e84e0d19df989749a

  • Size

    2.7MB

  • Sample

    230902-qvba3sdc41

  • MD5

    75d65d47b168119e240fcd780466cb0f

  • SHA1

    25f07f1a6451c71d6b79ed29c63365325ca4e58b

  • SHA256

    3828c19bbfe0b5d91260c9a2e989cc3f8f8a90ab8791793e84e0d19df989749a

  • SHA512

    f379aa6e26e33f5948ecd0559725fc25f2f8e3adb8cef10cd0cd95aaaf777cf32b22a3ca99df46eb1165dc51a390d5bf01f312767586b5c7b96f105bb100f614

  • SSDEEP

    49152:u4oMxaSJCuMxcFCECtRE1IhOavyLX6zUzTvkvEigf7YQCurh86ayPzrje49zEU:q2gx+zKCeDvM62Tvkq7/FD3q4ZR

Score
8/10
spywarestealerupx

Malware Config

Targets

    • Target

      3828c19bbfe0b5d91260c9a2e989cc3f8f8a90ab8791793e84e0d19df989749a

    • Size

      2.7MB

    • MD5

      75d65d47b168119e240fcd780466cb0f

    • SHA1

      25f07f1a6451c71d6b79ed29c63365325ca4e58b

    • SHA256

      3828c19bbfe0b5d91260c9a2e989cc3f8f8a90ab8791793e84e0d19df989749a

    • SHA512

      f379aa6e26e33f5948ecd0559725fc25f2f8e3adb8cef10cd0cd95aaaf777cf32b22a3ca99df46eb1165dc51a390d5bf01f312767586b5c7b96f105bb100f614

    • SSDEEP

      49152:u4oMxaSJCuMxcFCECtRE1IhOavyLX6zUzTvkvEigf7YQCurh86ayPzrje49zEU:q2gx+zKCeDvM62Tvkq7/FD3q4ZR

    Score
    8/10
    upxspywarestealer

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks