15c7e1aefaa8433f1f88c4bb866e5ff123e0b74a94c3bbf1c1a192f1155985ee | Triage

Sharing

General

Target

3da1c557ec219126a3131dc8ce5c52fa
Size

775KB
Sample

240101-xp52tsadh5
MD5

3da1c557ec219126a3131dc8ce5c52fa
SHA1

beebce35346d611d9cb54f12f7c1531a16810ab9
SHA256

15c7e1aefaa8433f1f88c4bb866e5ff123e0b74a94c3bbf1c1a192f1155985ee
SHA512

156f68d5899334e0ddf55ff075e7cb820a43c2eb6246446fc2fe4b17750dda2c9671e2c13120151ceb21f1038e2185062e3326dbe24b90b04b9590c89e361407
SSDEEP

24576:PKw1VHqTyH8tMR8yzUFF+8q9kDeukZnfD2IJ:S6tHQxFnq6yLZnyi

Score

7^/10

discovery persistence spyware stealer upx

Malware Config

Targets

- Target
  
  3da1c557ec219126a3131dc8ce5c52fa
- Size
  
  775KB
- MD5
  
  3da1c557ec219126a3131dc8ce5c52fa
- SHA1
  
  beebce35346d611d9cb54f12f7c1531a16810ab9
- SHA256
  
  15c7e1aefaa8433f1f88c4bb866e5ff123e0b74a94c3bbf1c1a192f1155985ee
- SHA512
  
  156f68d5899334e0ddf55ff075e7cb820a43c2eb6246446fc2fe4b17750dda2c9671e2c13120151ceb21f1038e2185062e3326dbe24b90b04b9590c89e361407
- SSDEEP
  
  24576:PKw1VHqTyH8tMR8yzUFF+8q9kDeukZnfD2IJ:S6tHQxFnq6yLZnyi
Score

7^/10

discovery persistence spyware stealer upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealerupx

behavioral2