Overview

overview

7

Static

static

7

0f1772cb85...37.exe

windows7-x64

7

0f1772cb85...37.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    0f1772cb85d7936fa90b7815544ad837

  • Size

    35KB

  • Sample

    231230-fgxl2sgehm

  • MD5

    0f1772cb85d7936fa90b7815544ad837

  • SHA1

    a9fc9f628c3e6ffe9f6e23bd925ac2895fe86364

  • SHA256

    6322f4d2acb8b6427d090bcd88242e1509edd183baa76e433f2b7656f75d3c3b

  • SHA512

    85836eb58ed6d7fc650c477e93a725c1119273cf2703bdbd584e754d738f7d438ac61fd6298ec192c26bfffa59f139ee58c84974cdfe7cf0a5649e1ca807c28f

  • SSDEEP

    768:X8Q2ZDX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIom46+IM:s9Z3KcR4mjD9r8226+F

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      0f1772cb85d7936fa90b7815544ad837

    • Size

      35KB

    • MD5

      0f1772cb85d7936fa90b7815544ad837

    • SHA1

      a9fc9f628c3e6ffe9f6e23bd925ac2895fe86364

    • SHA256

      6322f4d2acb8b6427d090bcd88242e1509edd183baa76e433f2b7656f75d3c3b

    • SHA512

      85836eb58ed6d7fc650c477e93a725c1119273cf2703bdbd584e754d738f7d438ac61fd6298ec192c26bfffa59f139ee58c84974cdfe7cf0a5649e1ca807c28f

    • SSDEEP

      768:X8Q2ZDX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIom46+IM:s9Z3KcR4mjD9r8226+F

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks