Overview

overview

7

Static

static

7

4002a100f2...5d.exe

windows7-x64

7

4002a100f2...5d.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4002a100f2d5c79432818ddf0bbc2c5d

  • Size

    46KB

  • Sample

    240104-f4252scad8

  • MD5

    4002a100f2d5c79432818ddf0bbc2c5d

  • SHA1

    64a3e2c5343cd9c5a6067a79e6997edcd4851c68

  • SHA256

    b3c02856b12d3a7aa48e4a53879f34290ec282da57cd81fff62825c86ff8e11a

  • SHA512

    4c99e8a570a4ae782b43d50b7bbd46dd0e911b429dee60025ffc43353c05c84a7fffad947aa80c1928b2173bf0e502c4eac0cfd9be6a9cff34ef9d54b00f4a16

  • SSDEEP

    768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFlzdNskHBloawqrY+0FZ:SKcR4mjD9r823FlJfloajuu+5BZ

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      4002a100f2d5c79432818ddf0bbc2c5d

    • Size

      46KB

    • MD5

      4002a100f2d5c79432818ddf0bbc2c5d

    • SHA1

      64a3e2c5343cd9c5a6067a79e6997edcd4851c68

    • SHA256

      b3c02856b12d3a7aa48e4a53879f34290ec282da57cd81fff62825c86ff8e11a

    • SHA512

      4c99e8a570a4ae782b43d50b7bbd46dd0e911b429dee60025ffc43353c05c84a7fffad947aa80c1928b2173bf0e502c4eac0cfd9be6a9cff34ef9d54b00f4a16

    • SSDEEP

      768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFlzdNskHBloawqrY+0FZ:SKcR4mjD9r823FlJfloajuu+5BZ

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks