Overview

overview

8

Static

static

1

Central Ex...56.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    Central Executor_37888156.exe

  • Size

    9.5MB

  • Sample

    231119-jbe2lahb74

  • MD5

    b63faa05b32b5bcf505e24211d70f359

  • SHA1

    1dedba5e4c529c915c1e7323bdfe4ebc089dab38

  • SHA256

    26b062e4b87db2e2bdb6839aac82b87c7be0a9d3aedd567be0e762cc12a11ab7

  • SHA512

    1b60075cdafcc9b89735729b9058b5b529ce04ed6834407e8945896de2f1716e2b6f5385e5c5eaf873cb055b3e172cf597371408339f642bc32ab3397afa1fd5

  • SSDEEP

    196608:J5FbJtGoIgE7sBrqNjmQ3bKfIiaNPFHNRsiK0:lbnFIP+rqNjL3bIIiEHMn0

Score
8/10
discoveryspywarestealerupx

Malware Config

Targets

    • Target

      Central Executor_37888156.exe

    • Size

      9.5MB

    • MD5

      b63faa05b32b5bcf505e24211d70f359

    • SHA1

      1dedba5e4c529c915c1e7323bdfe4ebc089dab38

    • SHA256

      26b062e4b87db2e2bdb6839aac82b87c7be0a9d3aedd567be0e762cc12a11ab7

    • SHA512

      1b60075cdafcc9b89735729b9058b5b529ce04ed6834407e8945896de2f1716e2b6f5385e5c5eaf873cb055b3e172cf597371408339f642bc32ab3397afa1fd5

    • SSDEEP

      196608:J5FbJtGoIgE7sBrqNjmQ3bKfIiaNPFHNRsiK0:lbnFIP+rqNjL3bIIiEHMn0

    Score
    8/10
    discoveryspywarestealerupx

    • Downloads MZ/PE file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks