e21aab6b23f522dc89cd662c16188560bf38789810e11113161e7bd2339052de | Triage

Sharing

Copy URL Twitter E-mail

General

Target

311cb2d2d503584bb370775040afa3e0
Size

197KB
Sample

231225-v4glnsedbm
MD5

311cb2d2d503584bb370775040afa3e0
SHA1

35b039094efb26afed79888fcd2bbc2fbc278386
SHA256

e21aab6b23f522dc89cd662c16188560bf38789810e11113161e7bd2339052de
SHA512

ecaa29f62f6a97525df32f25f098054fab2b43d33dfbf908d90ff3ac8282f1d31c7ee2f0a43ea604dd13bf1afb3718c9337c7a1b7fc9a2b02f22e762772eace4
SSDEEP

6144:DDtxEPb/lvvHVBfg9t3io4TIJ7gN0AnM1sU1JC0:DkPhvv1aB4vMJC0

Score

10^/10

persistence spyware stealer upx

Malware Config

Targets

- Target
  
  311cb2d2d503584bb370775040afa3e0
- Size
  
  197KB
- MD5
  
  311cb2d2d503584bb370775040afa3e0
- SHA1
  
  35b039094efb26afed79888fcd2bbc2fbc278386
- SHA256
  
  e21aab6b23f522dc89cd662c16188560bf38789810e11113161e7bd2339052de
- SHA512
  
  ecaa29f62f6a97525df32f25f098054fab2b43d33dfbf908d90ff3ac8282f1d31c7ee2f0a43ea604dd13bf1afb3718c9337c7a1b7fc9a2b02f22e762772eace4
- SSDEEP
  
  6144:DDtxEPb/lvvHVBfg9t3io4TIJ7gN0AnM1sU1JC0:DkPhvv1aB4vMJC0
Score

10^/10

persistence spyware stealer upx
- Modifies WinLogon for persistence
  persistence
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealerupx

behavioral2