Overview

overview

10

Static

static

3

1c4b31d105...99.exe

windows7-x64

10

1c4b31d105...99.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1c4b31d105d2ee3568815e928f7eda99

  • Size

    169KB

  • Sample

    231225-ala1ysbdf9

  • MD5

    1c4b31d105d2ee3568815e928f7eda99

  • SHA1

    202ef54ba72f1896cebd809adbfccfc0e1b8c01b

  • SHA256

    81e4628afcdef4156969b2f9bb28e8e960c3a7eb6c6807b85f5f414677beb46c

  • SHA512

    6fc782fee1bfdf24c4f5c8821f6907dec37be79932326d462b8930c8a731a0cb8c676d9f9fe88e01297385f0fe33e73ae3a81c48ab932b1d8dbe52601451a296

  • SSDEEP

    3072:7Zl7e7ve/RNnEbaTT6Sn1ccJWyyShXDfBXoKGw9G1NEQXsBOTFgM9hgyoHfTDB:Vte7W/s6mj+XvuNHs8TF9hgZbD

Score
10/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      1c4b31d105d2ee3568815e928f7eda99

    • Size

      169KB

    • MD5

      1c4b31d105d2ee3568815e928f7eda99

    • SHA1

      202ef54ba72f1896cebd809adbfccfc0e1b8c01b

    • SHA256

      81e4628afcdef4156969b2f9bb28e8e960c3a7eb6c6807b85f5f414677beb46c

    • SHA512

      6fc782fee1bfdf24c4f5c8821f6907dec37be79932326d462b8930c8a731a0cb8c676d9f9fe88e01297385f0fe33e73ae3a81c48ab932b1d8dbe52601451a296

    • SSDEEP

      3072:7Zl7e7ve/RNnEbaTT6Sn1ccJWyyShXDfBXoKGw9G1NEQXsBOTFgM9hgyoHfTDB:Vte7W/s6mj+XvuNHs8TF9hgZbD

    Score
    10/10
    persistencespywarestealerupx

    • Modifies WinLogon for persistence

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks