Overview

overview

7

Static

static

7

0ca388c7f3...a5.exe

windows7-x64

7

0ca388c7f3...a5.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    0ca388c7f3747ec226e8a7b8853695a5

  • Size

    35KB

  • Sample

    231230-dq8dsscff8

  • MD5

    0ca388c7f3747ec226e8a7b8853695a5

  • SHA1

    8e359dbe10d61246e8b147f40b727bfcbec91680

  • SHA256

    fdf7362c59139375e36007170b21f5da22a4da000f36435f9abca0718767f767

  • SHA512

    82cb87bb5ad241b6fec0a58897b7b6032cfa5d558dfbd98834e25c15b3497cffe2ba2ee059f5df951ae85e023133bbc007114e8e4badebb27e7af17d409858c7

  • SSDEEP

    768:X8Q2ZDX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIom46+It:s9Z3KcR4mjD9r8226+E

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      0ca388c7f3747ec226e8a7b8853695a5

    • Size

      35KB

    • MD5

      0ca388c7f3747ec226e8a7b8853695a5

    • SHA1

      8e359dbe10d61246e8b147f40b727bfcbec91680

    • SHA256

      fdf7362c59139375e36007170b21f5da22a4da000f36435f9abca0718767f767

    • SHA512

      82cb87bb5ad241b6fec0a58897b7b6032cfa5d558dfbd98834e25c15b3497cffe2ba2ee059f5df951ae85e023133bbc007114e8e4badebb27e7af17d409858c7

    • SSDEEP

      768:X8Q2ZDX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIom46+It:s9Z3KcR4mjD9r8226+E

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks