467fe65706a1e920460cf45c841ca669ba14333b69a042aaa01c4cebc4fc3577 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bb59c301f21b41162d2ce330f368199
Size

782KB
Sample

231226-hz38naaegr
MD5

5bb59c301f21b41162d2ce330f368199
SHA1

c47ff01e187d9d0ed054c8f76ad7c24ba9b578c9
SHA256

467fe65706a1e920460cf45c841ca669ba14333b69a042aaa01c4cebc4fc3577
SHA512

56a04959d0f0fae86cb01bc0485d6c09d3a7f5175213ec92ccf56fd59db4eb43a9411239e2168b29c9f339b834ee22d711438f427fbd03b710dc9b191cba47ab
SSDEEP

24576:G3tIDjSn94yoo4fQqO/4S6DecpcVODpth+:GaDjSn94fo4f1OJappYGrY

Score

7^/10

discovery persistence spyware stealer upx

Malware Config

Targets

- Target
  
  5bb59c301f21b41162d2ce330f368199
- Size
  
  782KB
- MD5
  
  5bb59c301f21b41162d2ce330f368199
- SHA1
  
  c47ff01e187d9d0ed054c8f76ad7c24ba9b578c9
- SHA256
  
  467fe65706a1e920460cf45c841ca669ba14333b69a042aaa01c4cebc4fc3577
- SHA512
  
  56a04959d0f0fae86cb01bc0485d6c09d3a7f5175213ec92ccf56fd59db4eb43a9411239e2168b29c9f339b834ee22d711438f427fbd03b710dc9b191cba47ab
- SSDEEP
  
  24576:G3tIDjSn94yoo4fQqO/4S6DecpcVODpth+:GaDjSn94fo4f1OJappYGrY
Score

7^/10

discovery persistence spyware stealer upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealerupx

behavioral2