Overview

overview

7

Static

static

7

389328c292...fa.exe

windows7-x64

7

389328c292...fa.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    389328c2922d87537aefbde82eff63fa

  • Size

    30KB

  • Sample

    231225-ycevjsead9

  • MD5

    389328c2922d87537aefbde82eff63fa

  • SHA1

    9761aa1cb752c3d908d4c7fb1a99cbdec4cb6111

  • SHA256

    98b8d69c66b80ea0dd19edf9f02fabd090d8d0f36a3e1ecdf480c5bba17bafc9

  • SHA512

    80fcdfb577424531807e4f913fb92b8b06706be8f4670de3f2007c40abc662428b6783a129167542fbcb312db6845a53c5ba96c0204d87dc587c3f58fbca13a6

  • SSDEEP

    768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFg:SKcR4mjD9r823Fg

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      389328c2922d87537aefbde82eff63fa

    • Size

      30KB

    • MD5

      389328c2922d87537aefbde82eff63fa

    • SHA1

      9761aa1cb752c3d908d4c7fb1a99cbdec4cb6111

    • SHA256

      98b8d69c66b80ea0dd19edf9f02fabd090d8d0f36a3e1ecdf480c5bba17bafc9

    • SHA512

      80fcdfb577424531807e4f913fb92b8b06706be8f4670de3f2007c40abc662428b6783a129167542fbcb312db6845a53c5ba96c0204d87dc587c3f58fbca13a6

    • SSDEEP

      768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFg:SKcR4mjD9r823Fg

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks