Overview

overview

7

Static

static

7

2bcad56a49...6c.exe

windows7-x64

7

2bcad56a49...6c.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2bcad56a49612280eced68c3364c526c

  • Size

    115KB

  • Sample

    231231-haqahafdhm

  • MD5

    2bcad56a49612280eced68c3364c526c

  • SHA1

    2cfa2607cf7418946c84da02f323dfb6c743bf6c

  • SHA256

    716e271525e8e530403bd21baf7f08da94bd9c6f5a26fe977eca344b715552ca

  • SHA512

    3d15bf7e63baf8bed6c9f24d45e2c43f99c8d9d1ce1fb432654d0144f576b500717f666946eabbf2b3b4720463287cdc39571fc8f6d7ec33efcd11ac9c898db0

  • SSDEEP

    3072:SKcWmjRrz3ZKcWmjRrz31D7W0OEtA4g2ma39LS69:hGyG17W0OEi4g2N39LSA

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      2bcad56a49612280eced68c3364c526c

    • Size

      115KB

    • MD5

      2bcad56a49612280eced68c3364c526c

    • SHA1

      2cfa2607cf7418946c84da02f323dfb6c743bf6c

    • SHA256

      716e271525e8e530403bd21baf7f08da94bd9c6f5a26fe977eca344b715552ca

    • SHA512

      3d15bf7e63baf8bed6c9f24d45e2c43f99c8d9d1ce1fb432654d0144f576b500717f666946eabbf2b3b4720463287cdc39571fc8f6d7ec33efcd11ac9c898db0

    • SSDEEP

      3072:SKcWmjRrz3ZKcWmjRrz31D7W0OEtA4g2ma39LS69:hGyG17W0OEi4g2N39LSA

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks