Overview

overview

7

Static

static

7

45033d03c7...52.exe

windows7-x64

7

45033d03c7...52.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    45033d03c732567b35288ed2d3198552

  • Size

    97KB

  • Sample

    240106-cl6tqsefhn

  • MD5

    45033d03c732567b35288ed2d3198552

  • SHA1

    f9bc6f7dc2f0544b4fcedaba86dfbbea35e459d9

  • SHA256

    64a29f5d3388a1adf762a87368a0843a9618df7f7d8a21d3357c73834bb9c1b1

  • SHA512

    44543b91153990f58ea301be76ef4e330ac0d07f8e5b89f6861fd37b3a26635b9bd8101b0a3bb1333128fd9b1e765f8446fc5ede96f7bfb099a9e8af35eb4cdc

  • SSDEEP

    1536:SKcR4mjD9r823F8IjZVa5pFkj3m65RP1hGtkMqFukSCWLQZxqKgOzHslLVk:SKcWmjRrz3Sksp6jfTj1uLQZxYLy

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      45033d03c732567b35288ed2d3198552

    • Size

      97KB

    • MD5

      45033d03c732567b35288ed2d3198552

    • SHA1

      f9bc6f7dc2f0544b4fcedaba86dfbbea35e459d9

    • SHA256

      64a29f5d3388a1adf762a87368a0843a9618df7f7d8a21d3357c73834bb9c1b1

    • SHA512

      44543b91153990f58ea301be76ef4e330ac0d07f8e5b89f6861fd37b3a26635b9bd8101b0a3bb1333128fd9b1e765f8446fc5ede96f7bfb099a9e8af35eb4cdc

    • SSDEEP

      1536:SKcR4mjD9r823F8IjZVa5pFkj3m65RP1hGtkMqFukSCWLQZxqKgOzHslLVk:SKcWmjRrz3Sksp6jfTj1uLQZxYLy

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks