Overview

overview

10

Static

static

3

10150b1677...aa.exe

windows7-x64

10

10150b1677...aa.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    10150b16778b188f776ef2af6830b1aa

  • Size

    288KB

  • Sample

    231224-yy349sacd3

  • MD5

    10150b16778b188f776ef2af6830b1aa

  • SHA1

    06b21170ed20b426733740ad9a733da83b32b60f

  • SHA256

    5ea302d3b296552c40824ca226cc611181117df72f3e8fbea7cc45b902917ac0

  • SHA512

    a1476832a96dbc4c5c60c36d5ef3252b43efe6453b1e83fe1e577e872b4ccfd091823dce80bf97b83e2487c88c490c74b22c14068916e5382149d66c08fe2f1b

  • SSDEEP

    6144:xX8JXkMQUXu+9qjCTWeqKas8hiAHlkyvbhA5qLXtE8VZP6lnrlZdgpP:uKM7u+xWEAyeAGy8V168P

Score
10/10
evasionpersistencespywarestealerupx

Malware Config

Targets

    • Target

      10150b16778b188f776ef2af6830b1aa

    • Size

      288KB

    • MD5

      10150b16778b188f776ef2af6830b1aa

    • SHA1

      06b21170ed20b426733740ad9a733da83b32b60f

    • SHA256

      5ea302d3b296552c40824ca226cc611181117df72f3e8fbea7cc45b902917ac0

    • SHA512

      a1476832a96dbc4c5c60c36d5ef3252b43efe6453b1e83fe1e577e872b4ccfd091823dce80bf97b83e2487c88c490c74b22c14068916e5382149d66c08fe2f1b

    • SSDEEP

      6144:xX8JXkMQUXu+9qjCTWeqKas8hiAHlkyvbhA5qLXtE8VZP6lnrlZdgpP:uKM7u+xWEAyeAGy8V168P

    Score
    10/10
    evasionpersistencespywarestealerupx

    • Modifies security service

      evasion

    • Disables taskbar notifications via registry modification

      evasion

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks