Overview

overview

7

Static

static

7

0fa856f4f5...d3.exe

windows7-x64

7

0fa856f4f5...d3.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    0fa856f4f556a8ebee12791732cf5ad3

  • Size

    276KB

  • Sample

    231230-ftz8psebh9

  • MD5

    0fa856f4f556a8ebee12791732cf5ad3

  • SHA1

    9cd5630153c28201bece311af14d4d55817c60b5

  • SHA256

    4a59be64c8f676d4ddeec4375a7878350b5e71e602b750a98da3b2431a99b986

  • SHA512

    7bafee972b474734d5a392d5ca56fbfd6cb6e945e5156eead689cb4b922ad6f67f4d07a7eaf82b6f8ac55678afba17f0fdd19eb16b7d92e8f5e280a560fb3bf0

  • SSDEEP

    6144:hGyGJxIKMkh8tCfHjWe4J2LiUgsVNP72T2gGC:h3iIKM2fDWN4Lds

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      0fa856f4f556a8ebee12791732cf5ad3

    • Size

      276KB

    • MD5

      0fa856f4f556a8ebee12791732cf5ad3

    • SHA1

      9cd5630153c28201bece311af14d4d55817c60b5

    • SHA256

      4a59be64c8f676d4ddeec4375a7878350b5e71e602b750a98da3b2431a99b986

    • SHA512

      7bafee972b474734d5a392d5ca56fbfd6cb6e945e5156eead689cb4b922ad6f67f4d07a7eaf82b6f8ac55678afba17f0fdd19eb16b7d92e8f5e280a560fb3bf0

    • SSDEEP

      6144:hGyGJxIKMkh8tCfHjWe4J2LiUgsVNP72T2gGC:h3iIKM2fDWN4Lds

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks