Overview

overview

10

Static

static

10

UserInfoUpdated.exe

windows7-x64

7

UserInfoUpdated.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    UserInfoUpdated.exe

  • Size

    19.9MB

  • Sample

    231012-2kd5rsdg9w

  • MD5

    71e21f6e321d61573d538be965bea00a

  • SHA1

    55b2e23c4aa527091b052a6b4a06c7d122fbf3d2

  • SHA256

    46019f2c2ef63599a9f66e83e6d0e76cf58d4037c0678bb689e93e77b2c45296

  • SHA512

    b2634a1180f2d6759e74e0acc777a0abf7d81cfeaf2bac64c90017664ab4f899179f20996ea01c3d31d536678ab997a4316204e4880e4498b6d78cf0ecd86b7b

  • SSDEEP

    393216:UQtsT4Hr7M5li8k3meCcGfd0NYMAWh8k/clAfhGh:UQtscL7M5lDaY5F0NYoha7

Score
10/10
crealstealerpyinstallerspywarestealer

Malware Config

Targets

    • Target

      UserInfoUpdated.exe

    • Size

      19.9MB

    • MD5

      71e21f6e321d61573d538be965bea00a

    • SHA1

      55b2e23c4aa527091b052a6b4a06c7d122fbf3d2

    • SHA256

      46019f2c2ef63599a9f66e83e6d0e76cf58d4037c0678bb689e93e77b2c45296

    • SHA512

      b2634a1180f2d6759e74e0acc777a0abf7d81cfeaf2bac64c90017664ab4f899179f20996ea01c3d31d536678ab997a4316204e4880e4498b6d78cf0ecd86b7b

    • SSDEEP

      393216:UQtsT4Hr7M5li8k3meCcGfd0NYMAWh8k/clAfhGh:UQtscL7M5lDaY5F0NYoha7

    Score
    7/10
    spywarestealer

    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks