8d6f3c6ba6daa46ca65a19d91ac95fb0929aeed94954fc9cc99e4abecc256904 | Triage

Submit
Reports

Overview

overview

7

Static

static

7

4115123d26...ed.exe

windows7-x64

7

4115123d26...ed.exe

windows10-2004-x64

7

Sharing

General

Target

4115123d26089f2ce09fffb8aa7e45ed
Size

93KB
Sample

240104-rlms7ahgak
MD5

4115123d26089f2ce09fffb8aa7e45ed
SHA1

ff430b58bf30a551e088fcf23670643449adcc5d
SHA256

8d6f3c6ba6daa46ca65a19d91ac95fb0929aeed94954fc9cc99e4abecc256904
SHA512

07c435c4270b7f4266d832bacec231a1b15dc104502e28c175622e8a5a5538142d04240d53280d97d8c26c2a8ee912455aceac42c9f7e5cf44220bc0a0b4f446
SSDEEP

1536:SKcR4mjD9r823FIKNqlkQ8z2iVBrSKSwe8xwwkZs3IXEP:SKcWmjRrz3m2qz0lXkZs3ic

Score

7^/10

persistence spyware stealer upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

4115123d26089f2ce09fffb8aa7e45ed.exe

Resource

win7-20231215-en

persistence spyware stealer upx

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

4115123d26089f2ce09fffb8aa7e45ed.exe

Resource

win10v2004-20231215-en

persistence spyware stealer upx

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  4115123d26089f2ce09fffb8aa7e45ed
- Size
  
  93KB
- MD5
  
  4115123d26089f2ce09fffb8aa7e45ed
- SHA1
  
  ff430b58bf30a551e088fcf23670643449adcc5d
- SHA256
  
  8d6f3c6ba6daa46ca65a19d91ac95fb0929aeed94954fc9cc99e4abecc256904
- SHA512
  
  07c435c4270b7f4266d832bacec231a1b15dc104502e28c175622e8a5a5538142d04240d53280d97d8c26c2a8ee912455aceac42c9f7e5cf44220bc0a0b4f446
- SSDEEP
  
  1536:SKcR4mjD9r823FIKNqlkQ8z2iVBrSKSwe8xwwkZs3IXEP:SKcWmjRrz3m2qz0lXkZs3ic
Score

7^/10

persistence spyware stealer upx
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealerupx

behavioral2

persistencespywarestealerupx

© 2018-2024

Terms | Privacy