Overview

overview

7

Static

static

7

70af7a4cad...2d.exe

windows7-x64

7

70af7a4cad...2d.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    70af7a4cad111f5701eaf25a7b448a2d.exe

  • Size

    655KB

  • Sample

    240107-y362qadeap

  • MD5

    70af7a4cad111f5701eaf25a7b448a2d

  • SHA1

    69fa50e2e961abcc3084505d0b9d72b40a8086fd

  • SHA256

    b72266944e7fb4dff0f450f4f7b5e47a63f815d84e7511dca1496c532f17eeca

  • SHA512

    e6fc85d58b0198a211d96a39e8be1b619d3383cccc5ecccbf837b4b228d7cb820cb91a76f73e579d464ba0237b0ce323349c2ba39729332d39623b40ec524178

  • SSDEEP

    12288:VEQoSmWxmqKBGjspYIif5CvtBDYQkoasXQROgv+ohAMqdyeuCu+JzjZ/:V3vKBGjmvcEPYQPasXZgvhAbdymZ/

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      70af7a4cad111f5701eaf25a7b448a2d.exe

    • Size

      655KB

    • MD5

      70af7a4cad111f5701eaf25a7b448a2d

    • SHA1

      69fa50e2e961abcc3084505d0b9d72b40a8086fd

    • SHA256

      b72266944e7fb4dff0f450f4f7b5e47a63f815d84e7511dca1496c532f17eeca

    • SHA512

      e6fc85d58b0198a211d96a39e8be1b619d3383cccc5ecccbf837b4b228d7cb820cb91a76f73e579d464ba0237b0ce323349c2ba39729332d39623b40ec524178

    • SSDEEP

      12288:VEQoSmWxmqKBGjspYIif5CvtBDYQkoasXQROgv+ohAMqdyeuCu+JzjZ/:V3vKBGjmvcEPYQPasXZgvhAbdymZ/

    Score
    7/10
    persistencespywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks