Overview

overview

7

Static

static

7

ddcdf089b1...74.exe

windows7-x64

7

ddcdf089b1...74.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ddcdf089b1be796926db1d1f496b7b74

  • Size

    331KB

  • Sample

    231222-s5bqpsaegr

  • MD5

    ddcdf089b1be796926db1d1f496b7b74

  • SHA1

    ef17977f2e4741ad8bc95190cfd0b73ba7a8eae7

  • SHA256

    611578ffcc5239358bbca104bca1a24ff3353b1196f8977675a0b5229e1afd87

  • SHA512

    fd12863dad7da12cc3d77e73a016c3252279bcb534200c217a567997eda5eeef87de974bc67557612c84a05a5c14520c5dbf8f779d02ef7897c0d684ba73ffe2

  • SSDEEP

    6144:sZl2PG+WyimOSFp5w4n4vQGozfenUlKzNm2gfFukD/0ke5UeR8S:smP5WUS4n4vlo78Zv4ukAq6

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      ddcdf089b1be796926db1d1f496b7b74

    • Size

      331KB

    • MD5

      ddcdf089b1be796926db1d1f496b7b74

    • SHA1

      ef17977f2e4741ad8bc95190cfd0b73ba7a8eae7

    • SHA256

      611578ffcc5239358bbca104bca1a24ff3353b1196f8977675a0b5229e1afd87

    • SHA512

      fd12863dad7da12cc3d77e73a016c3252279bcb534200c217a567997eda5eeef87de974bc67557612c84a05a5c14520c5dbf8f779d02ef7897c0d684ba73ffe2

    • SSDEEP

      6144:sZl2PG+WyimOSFp5w4n4vQGozfenUlKzNm2gfFukD/0ke5UeR8S:smP5WUS4n4vlo78Zv4ukAq6

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks