Overview

overview

10

Static

static

10

7e1fdba02d...6d.exe

windows7-x64

9

7e1fdba02d...6d.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    7e1fdba02d3b4f8ad6b0dce97d96ea6d.exe

  • Size

    1.4MB

  • Sample

    240102-tkfplahefp

  • MD5

    7e1fdba02d3b4f8ad6b0dce97d96ea6d

  • SHA1

    f48ae1452b6d9ee778eca7789eedb01c2833a9d4

  • SHA256

    cffb6fad2233cb1d9bf78556fc31346f21ab57c57969ab2bbeaffcec9cd81fe7

  • SHA512

    7b6651ecd0f9c2847291d8614ad4d37a78423d81573caccd97d3181f1ff18c951aceae9aa331bc766f15a8cfd8e8cca6afc5e21e922ecceefa27668d7e527d3c

  • SSDEEP

    24576:Ahik9Fe48J//s8kUfpinWpzjc540i+knpJmJ4e52AeFJHFm9:aup9/s8kUEWcVi+A7AePE9

Score
10/10
collectionspywarestealerupx

Malware Config

Targets

    • Target

      7e1fdba02d3b4f8ad6b0dce97d96ea6d.exe

    • Size

      1.4MB

    • MD5

      7e1fdba02d3b4f8ad6b0dce97d96ea6d

    • SHA1

      f48ae1452b6d9ee778eca7789eedb01c2833a9d4

    • SHA256

      cffb6fad2233cb1d9bf78556fc31346f21ab57c57969ab2bbeaffcec9cd81fe7

    • SHA512

      7b6651ecd0f9c2847291d8614ad4d37a78423d81573caccd97d3181f1ff18c951aceae9aa331bc766f15a8cfd8e8cca6afc5e21e922ecceefa27668d7e527d3c

    • SSDEEP

      24576:Ahik9Fe48J//s8kUfpinWpzjc540i+knpJmJ4e52AeFJHFm9:aup9/s8kUEWcVi+A7AePE9

    Score
    9/10
    collectionspywarestealerupx

    • NirSoft MailPassView

      Password recovery tool for various email clients

    • Nirsoft

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Accesses Microsoft Outlook accounts

      collection

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks