fd85dc0a7e681564a22ca5141cb6770957858c0bde4af44d9706cacac6dbf787 | Triage

Sharing

General

Target

54f09d840a43840dd2320fd9c0e3bc5a
Size

36KB
Sample

231222-c639caaha9
MD5

54f09d840a43840dd2320fd9c0e3bc5a
SHA1

68ceee865243e75c58b886d638e8e796a1ddd042
SHA256

fd85dc0a7e681564a22ca5141cb6770957858c0bde4af44d9706cacac6dbf787
SHA512

ccfdd4d5bccccfec6c5c9a59e2195962ee2931b9ebff513f930dbd4858475d211747b26bd428dd7e046315c4a14c33059a371df2911cedc44d47377ebbde1935
SSDEEP

768:X8Q2ZDX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIom46+I9:s9Z3KcR4mjD9r8226+0

Score

7^/10

persistence spyware stealer upx

Malware Config

Targets

- Target
  
  54f09d840a43840dd2320fd9c0e3bc5a
- Size
  
  36KB
- MD5
  
  54f09d840a43840dd2320fd9c0e3bc5a
- SHA1
  
  68ceee865243e75c58b886d638e8e796a1ddd042
- SHA256
  
  fd85dc0a7e681564a22ca5141cb6770957858c0bde4af44d9706cacac6dbf787
- SHA512
  
  ccfdd4d5bccccfec6c5c9a59e2195962ee2931b9ebff513f930dbd4858475d211747b26bd428dd7e046315c4a14c33059a371df2911cedc44d47377ebbde1935
- SSDEEP
  
  768:X8Q2ZDX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIom46+I9:s9Z3KcR4mjD9r8226+0
Score

7^/10

persistence spyware stealer upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealerupx

behavioral2

persistencespywarestealerupx