Overview

overview

10

Static

static

3

06eeaa6237...4a.exe

windows7-x64

10

06eeaa6237...4a.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    06eeaa623759162705b847d39aca3d4a

  • Size

    192KB

  • Sample

    231229-3gf1mafbar

  • MD5

    06eeaa623759162705b847d39aca3d4a

  • SHA1

    4107a489506bdd264d66865186d3ba8a1f1c7268

  • SHA256

    e619df9f4c8ce55899960027520c4feac3a1878adc09a38e8be5a2d01e196c5d

  • SHA512

    500e6aa5b918e0c0352b39e712bbb1de324b581e2d978e4558ed86ca95871b9ddb984dfcba7a30a1cbc169ba2a4f6e70e0e5346c27e6669aa32c90b27bcc72c0

  • SSDEEP

    6144:tp2xx+vd/CAZRg87M5oZGOovHZMJMv8P:tgD0d/88IK+BFv8

Score
10/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      06eeaa623759162705b847d39aca3d4a

    • Size

      192KB

    • MD5

      06eeaa623759162705b847d39aca3d4a

    • SHA1

      4107a489506bdd264d66865186d3ba8a1f1c7268

    • SHA256

      e619df9f4c8ce55899960027520c4feac3a1878adc09a38e8be5a2d01e196c5d

    • SHA512

      500e6aa5b918e0c0352b39e712bbb1de324b581e2d978e4558ed86ca95871b9ddb984dfcba7a30a1cbc169ba2a4f6e70e0e5346c27e6669aa32c90b27bcc72c0

    • SSDEEP

      6144:tp2xx+vd/CAZRg87M5oZGOovHZMJMv8P:tgD0d/88IK+BFv8

    Score
    10/10
    persistencespywarestealerupx

    • Modifies WinLogon for persistence

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks