Overview

overview

7

Static

static

7

0fd1660a36...54.exe

windows7-x64

7

0fd1660a36...54.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    0fd1660a36d3cff5d05243532e4b3554

  • Size

    30KB

  • Sample

    231230-fzb33afbc8

  • MD5

    0fd1660a36d3cff5d05243532e4b3554

  • SHA1

    27291e2719f55d26b320c66635096eb82ecc3f9c

  • SHA256

    cf4d29a1accccb02ed89a2d45b53534b54515f7c9f1ac90d992e090358481c50

  • SHA512

    3f8e38e92c661f1ea7ca4a985a7d7bacd09d1fdd5f1f35231b45595f9315137577cb561e8cd65943024269e614cf2e48d32caa85a6161b7616c7d3119f38d135

  • SSDEEP

    768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFtV:SKcR4mjD9r823FH

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      0fd1660a36d3cff5d05243532e4b3554

    • Size

      30KB

    • MD5

      0fd1660a36d3cff5d05243532e4b3554

    • SHA1

      27291e2719f55d26b320c66635096eb82ecc3f9c

    • SHA256

      cf4d29a1accccb02ed89a2d45b53534b54515f7c9f1ac90d992e090358481c50

    • SHA512

      3f8e38e92c661f1ea7ca4a985a7d7bacd09d1fdd5f1f35231b45595f9315137577cb561e8cd65943024269e614cf2e48d32caa85a6161b7616c7d3119f38d135

    • SSDEEP

      768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFtV:SKcR4mjD9r823FH

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks