Overview

overview

7

Static

static

7

0b4313f2fb...22.exe

windows7-x64

7

0b4313f2fb...22.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    0b4313f2fbc9cc2d9a942e6bfc1a6622

  • Size

    75KB

  • Sample

    231230-cnes2ahffj

  • MD5

    0b4313f2fbc9cc2d9a942e6bfc1a6622

  • SHA1

    b81b0ab3f237e515b22050d2a0aafe44ef2d4dd4

  • SHA256

    3af1544252bedc67aeabb577ab53659589f68ed47b800e896893b8fdfef6dccd

  • SHA512

    b7da1f66c806ef8ef8cd42cecd7167f766f5a12737dc1f6e89f5ec51ac9a22f94f5132716b472d4a12e3b997108b7fdcd2cbe88f95204f868eeb6678d3177d3d

  • SSDEEP

    1536:SKcR4mjD9r823FHKcR4mjD9r823Fcl/D/qu7IjNcQd:SKcWmjRrz3ZKcWmjRrz36/DzIjuQd

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      0b4313f2fbc9cc2d9a942e6bfc1a6622

    • Size

      75KB

    • MD5

      0b4313f2fbc9cc2d9a942e6bfc1a6622

    • SHA1

      b81b0ab3f237e515b22050d2a0aafe44ef2d4dd4

    • SHA256

      3af1544252bedc67aeabb577ab53659589f68ed47b800e896893b8fdfef6dccd

    • SHA512

      b7da1f66c806ef8ef8cd42cecd7167f766f5a12737dc1f6e89f5ec51ac9a22f94f5132716b472d4a12e3b997108b7fdcd2cbe88f95204f868eeb6678d3177d3d

    • SSDEEP

      1536:SKcR4mjD9r823FHKcR4mjD9r823Fcl/D/qu7IjNcQd:SKcWmjRrz3ZKcWmjRrz36/DzIjuQd

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks