ef40fb60bb274cea67f46a42f94ebd37eb519546550c146181f58b78fc91de84 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74c08dee95f8155b757ddd048c20e201
Size

32KB
Sample

231222-gy48wsaeej
MD5

74c08dee95f8155b757ddd048c20e201
SHA1

f59f3373a8ea955a6c52fc9ef2f6981e5b045251
SHA256

ef40fb60bb274cea67f46a42f94ebd37eb519546550c146181f58b78fc91de84
SHA512

57f87f374d492c727befc6c91268f5e8f5f52c82964e3d461ac1c105379ace3ac3c51268c90e6323ebcba4c2e0ca5d9fca07edfb715aeb39ce076bcabcf7a955
SSDEEP

768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEF:SKcR4mjD9r823F

Score

7^/10

persistence spyware stealer upx

Malware Config

Targets

- Target
  
  74c08dee95f8155b757ddd048c20e201
- Size
  
  32KB
- MD5
  
  74c08dee95f8155b757ddd048c20e201
- SHA1
  
  f59f3373a8ea955a6c52fc9ef2f6981e5b045251
- SHA256
  
  ef40fb60bb274cea67f46a42f94ebd37eb519546550c146181f58b78fc91de84
- SHA512
  
  57f87f374d492c727befc6c91268f5e8f5f52c82964e3d461ac1c105379ace3ac3c51268c90e6323ebcba4c2e0ca5d9fca07edfb715aeb39ce076bcabcf7a955
- SSDEEP
  
  768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEF:SKcR4mjD9r823F
Score

7^/10

persistence spyware stealer upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealerupx

behavioral2

persistencespywarestealerupx