e5deeec0eb0e1dead1d3ae2472eabc1c80434dd7b0e5840b2b1cac5772d664d4 | Triage

Sharing

General

Target

0fa8142c99d76b887418cabc281d8096
Size

716KB
Sample

231225-jjwpbafba9
MD5

0fa8142c99d76b887418cabc281d8096
SHA1

72fa31598610bf6ed5f5a34a190eff9149b9582c
SHA256

e5deeec0eb0e1dead1d3ae2472eabc1c80434dd7b0e5840b2b1cac5772d664d4
SHA512

ac5e82dd3a0a67b40124dacd9b3b23fd30d82eb6f6816170b77e8737f68ab856e1808f47ad34cc5b3a45c959439f9de4bf87c8089d2bd47d34cb854f7734c55b
SSDEEP

12288:6TnxS98nLh7p1kpO7U4pPSzI1p5hKijn5TwEVn2wB/p2b8QYDOdqIqmhX:65lGO7UM5hZ9Jxw8BDOdBFX

Score

7^/10

discovery persistence spyware stealer upx

Malware Config

Targets

- Target
  
  0fa8142c99d76b887418cabc281d8096
- Size
  
  716KB
- MD5
  
  0fa8142c99d76b887418cabc281d8096
- SHA1
  
  72fa31598610bf6ed5f5a34a190eff9149b9582c
- SHA256
  
  e5deeec0eb0e1dead1d3ae2472eabc1c80434dd7b0e5840b2b1cac5772d664d4
- SHA512
  
  ac5e82dd3a0a67b40124dacd9b3b23fd30d82eb6f6816170b77e8737f68ab856e1808f47ad34cc5b3a45c959439f9de4bf87c8089d2bd47d34cb854f7734c55b
- SSDEEP
  
  12288:6TnxS98nLh7p1kpO7U4pPSzI1p5hKijn5TwEVn2wB/p2b8QYDOdqIqmhX:65lGO7UM5hZ9Jxw8BDOdBFX
Score

7^/10

discovery persistence spyware stealer upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealerupx

behavioral2