Overview

overview

7

Static

static

7

11665ac28b...a7.exe

windows7-x64

7

11665ac28b...a7.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    11665ac28b72ddb69669e22d6812eaa7

  • Size

    29KB

  • Sample

    231230-hj77nsggh2

  • MD5

    11665ac28b72ddb69669e22d6812eaa7

  • SHA1

    038d1ee5554969755b5136facac652a9d0906765

  • SHA256

    84a82074c09ecd6f1867d316377185d0cc19b8ac4296d1b4c133339dfba3bb6e

  • SHA512

    f060184781f297e78f142ee2785e95059689e775b16123644c9b4fe403c108cda76fbe07eeaa0471b97e5d1c2a0d49a4a17cbe6fad711e44412dabc8c8382ea0

  • SSDEEP

    768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFX:SKcR4mjD9r823FX

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      11665ac28b72ddb69669e22d6812eaa7

    • Size

      29KB

    • MD5

      11665ac28b72ddb69669e22d6812eaa7

    • SHA1

      038d1ee5554969755b5136facac652a9d0906765

    • SHA256

      84a82074c09ecd6f1867d316377185d0cc19b8ac4296d1b4c133339dfba3bb6e

    • SHA512

      f060184781f297e78f142ee2785e95059689e775b16123644c9b4fe403c108cda76fbe07eeaa0471b97e5d1c2a0d49a4a17cbe6fad711e44412dabc8c8382ea0

    • SSDEEP

      768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFX:SKcR4mjD9r823FX

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks