Overview

overview

7

Static

static

7

1eaf517587...7a.exe

windows7-x64

7

1eaf517587...7a.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    1eaf517587cd6a62256ab3ba83c77e7a

  • Size

    173KB

  • Sample

    231230-2j6hmadefj

  • MD5

    1eaf517587cd6a62256ab3ba83c77e7a

  • SHA1

    e8448d4a60d710c328a6a7a455dd9928930d0a2a

  • SHA256

    93579071f3703719bbe3cee73a51df9748d76dff3952c8d99938a5a4024fb448

  • SHA512

    68b43f8cc18d46a2fe91e75a7fa0460fa8c7c5b31769959263e3d91eb59fce4a7ba8be1d5e3023215445da575291e849fb47d7661ecff819cf5797390163056b

  • SSDEEP

    3072:sr3KcWmjRrzSdr3KcWmjRrzSTWGasnWHMccYGlWRXrCIkN5pJlV1CDi:/CyGIsYjCl5/n1CDi

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      1eaf517587cd6a62256ab3ba83c77e7a

    • Size

      173KB

    • MD5

      1eaf517587cd6a62256ab3ba83c77e7a

    • SHA1

      e8448d4a60d710c328a6a7a455dd9928930d0a2a

    • SHA256

      93579071f3703719bbe3cee73a51df9748d76dff3952c8d99938a5a4024fb448

    • SHA512

      68b43f8cc18d46a2fe91e75a7fa0460fa8c7c5b31769959263e3d91eb59fce4a7ba8be1d5e3023215445da575291e849fb47d7661ecff819cf5797390163056b

    • SSDEEP

      3072:sr3KcWmjRrzSdr3KcWmjRrzSTWGasnWHMccYGlWRXrCIkN5pJlV1CDi:/CyGIsYjCl5/n1CDi

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks