Overview

overview

7

Static

static

7

4640507635...a5.exe

windows7-x64

7

4640507635...a5.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    46405076352ab893d0523fd2948b68a5

  • Size

    29KB

  • Sample

    240106-pwvknsgebk

  • MD5

    46405076352ab893d0523fd2948b68a5

  • SHA1

    f0fe579882b483f66fe9a4471ab4988ade082e58

  • SHA256

    48a524502ab7daa0c8bd420e56c50574566ee8d6e904368a734468572f23c896

  • SHA512

    af53fc640806aa43d2d65bbd48025f185776bf13ebfc0c1d22037778d8514fd14e5e788eeb0fc8ffa55750901a6a05c1244fc960334df0bc8dab888925259f4b

  • SSDEEP

    768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFHnGy:SKcR4mjD9r823FHl

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      46405076352ab893d0523fd2948b68a5

    • Size

      29KB

    • MD5

      46405076352ab893d0523fd2948b68a5

    • SHA1

      f0fe579882b483f66fe9a4471ab4988ade082e58

    • SHA256

      48a524502ab7daa0c8bd420e56c50574566ee8d6e904368a734468572f23c896

    • SHA512

      af53fc640806aa43d2d65bbd48025f185776bf13ebfc0c1d22037778d8514fd14e5e788eeb0fc8ffa55750901a6a05c1244fc960334df0bc8dab888925259f4b

    • SSDEEP

      768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFHnGy:SKcR4mjD9r823FHl

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks