Overview

overview

7

Static

static

7

5f214cd168...0b.exe

windows7-x64

7

5f214cd168...0b.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5f214cd1684eb3fa626afbc7c37c070b

  • Size

    221KB

  • Sample

    231222-ejlrwsdhf8

  • MD5

    5f214cd1684eb3fa626afbc7c37c070b

  • SHA1

    93fde6df467dcacd565fbcb2e2bda3948ea1f4ab

  • SHA256

    b0a36aa10110fe4ebb3e91350c7674fafd18d966eb3a4fef8bb82e03adc229ce

  • SHA512

    25e03b2e7484e69bf3a685537da67d6528eac7b2504ba1e53f10e91aea2bb460b2262f32a5842e69ecdc2d79d3fcba4b2fdbde5cd1105a6132ea13c30038f6e4

  • SSDEEP

    6144:hGOMLFRB/TvEGmbYAy5XNoDBCVt/uwnn6DA9lduNo:hkNmbtD8/u6D97P

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      5f214cd1684eb3fa626afbc7c37c070b

    • Size

      221KB

    • MD5

      5f214cd1684eb3fa626afbc7c37c070b

    • SHA1

      93fde6df467dcacd565fbcb2e2bda3948ea1f4ab

    • SHA256

      b0a36aa10110fe4ebb3e91350c7674fafd18d966eb3a4fef8bb82e03adc229ce

    • SHA512

      25e03b2e7484e69bf3a685537da67d6528eac7b2504ba1e53f10e91aea2bb460b2262f32a5842e69ecdc2d79d3fcba4b2fdbde5cd1105a6132ea13c30038f6e4

    • SSDEEP

      6144:hGOMLFRB/TvEGmbYAy5XNoDBCVt/uwnn6DA9lduNo:hkNmbtD8/u6D97P

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks