89059412477c30b959f55a7516a08b7dce7af26a8a07b3903645fdac012e13fc | Triage

Sharing

General

Target

7beac7a3bc03d30ab34c94a68d1ef597.exe
Size

277KB
Sample

240101-l3mlvsbbg8
MD5

7beac7a3bc03d30ab34c94a68d1ef597
SHA1

3cf0a9d02394bace4261f1bab06ac73ae12dfd0b
SHA256

89059412477c30b959f55a7516a08b7dce7af26a8a07b3903645fdac012e13fc
SHA512

97694fbe8f63315bdc0699123736088e3726078c0dd2d37d8d8ebb91d8d9b187eced20dc06db4b5495d928758f75378785cbc105b5ae6eabbf2cf1cdc5e34e65
SSDEEP

6144:5tTXPlWWZwrjVNVa4pKpo5YuKMQEWBe1t186ctjqr:5RXJZwfVNwTuYuTkEW4

Score

10^/10

evasion persistence spyware stealer upx

Malware Config

Targets

- Target
  
  7beac7a3bc03d30ab34c94a68d1ef597.exe
- Size
  
  277KB
- MD5
  
  7beac7a3bc03d30ab34c94a68d1ef597
- SHA1
  
  3cf0a9d02394bace4261f1bab06ac73ae12dfd0b
- SHA256
  
  89059412477c30b959f55a7516a08b7dce7af26a8a07b3903645fdac012e13fc
- SHA512
  
  97694fbe8f63315bdc0699123736088e3726078c0dd2d37d8d8ebb91d8d9b187eced20dc06db4b5495d928758f75378785cbc105b5ae6eabbf2cf1cdc5e34e65
- SSDEEP
  
  6144:5tTXPlWWZwrjVNVa4pKpo5YuKMQEWBe1t186ctjqr:5RXJZwfVNwTuYuTkEW4
Score

10^/10

evasion persistence spyware stealer upx
- Modifies security service
  evasion
- Disables taskbar notifications via registry modification
  evasion
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencespywarestealerupx

behavioral2