Overview

overview

7

Static

static

7

3ec2a3c493...7b.exe

windows7-x64

7

3ec2a3c493...7b.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    3ec2a3c49371dcf1dc36bf88baba9e7b

  • Size

    38KB

  • Sample

    240103-rl28waghb6

  • MD5

    3ec2a3c49371dcf1dc36bf88baba9e7b

  • SHA1

    d057dae2e25dae2587f26f69924df74ac3f51762

  • SHA256

    1c95b49617bf58fd6fa8561b785e38af4a7fd0ad0ca55d56e7404138da577f78

  • SHA512

    49996b786c375102e934f5caa4341c1cace596c033549d91cccd236f276d7b8a56596e2c204506a692d68d7a2adcb94ca20e6c6aa870d3c3f1529f13328faff3

  • SSDEEP

    768:X8Q2ZDX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIom46+IQbJS:s9Z3KcR4mjD9r8226+U

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      3ec2a3c49371dcf1dc36bf88baba9e7b

    • Size

      38KB

    • MD5

      3ec2a3c49371dcf1dc36bf88baba9e7b

    • SHA1

      d057dae2e25dae2587f26f69924df74ac3f51762

    • SHA256

      1c95b49617bf58fd6fa8561b785e38af4a7fd0ad0ca55d56e7404138da577f78

    • SHA512

      49996b786c375102e934f5caa4341c1cace596c033549d91cccd236f276d7b8a56596e2c204506a692d68d7a2adcb94ca20e6c6aa870d3c3f1529f13328faff3

    • SSDEEP

      768:X8Q2ZDX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIom46+IQbJS:s9Z3KcR4mjD9r8226+U

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks