Overview

overview

7

Static

static

7

1c5e0eb6cf...13.exe

windows7-x64

7

1c5e0eb6cf...13.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1c5e0eb6cf04b73c30ddb5ea9daa3613

  • Size

    124KB

  • Sample

    231230-zthhfagecj

  • MD5

    1c5e0eb6cf04b73c30ddb5ea9daa3613

  • SHA1

    83c302b03112e62bc0d68aa988332b8ab07ab443

  • SHA256

    c9b316e552d1f2152649d73c89dfd22977b7174fccc989c1134b7d2983385d05

  • SHA512

    8684ccbaa83a40210d8b673cf4fa942d287a9222cb226fe0659fa0958b44ccc2d21af7d4326d3da3bce0e351bf1a98e9d08a37f98e40fe6ba867e1ce241d7506

  • SSDEEP

    3072:SKcWmjRrz3ciTuy1djwPJnKlrV/X0EJCawwF5TlAiih:hGceusdjwhniP0APLlA1h

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      1c5e0eb6cf04b73c30ddb5ea9daa3613

    • Size

      124KB

    • MD5

      1c5e0eb6cf04b73c30ddb5ea9daa3613

    • SHA1

      83c302b03112e62bc0d68aa988332b8ab07ab443

    • SHA256

      c9b316e552d1f2152649d73c89dfd22977b7174fccc989c1134b7d2983385d05

    • SHA512

      8684ccbaa83a40210d8b673cf4fa942d287a9222cb226fe0659fa0958b44ccc2d21af7d4326d3da3bce0e351bf1a98e9d08a37f98e40fe6ba867e1ce241d7506

    • SSDEEP

      3072:SKcWmjRrz3ciTuy1djwPJnKlrV/X0EJCawwF5TlAiih:hGceusdjwhniP0APLlA1h

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks