Overview

overview

8

Static

static

7

589a8b7e45...02.exe

windows7-x64

7

589a8b7e45...02.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    589a8b7e459c1cddad5fb7df2bebcf02

  • Size

    341KB

  • Sample

    240113-lpqflagfe3

  • MD5

    589a8b7e459c1cddad5fb7df2bebcf02

  • SHA1

    f0587207cda9dd1cff9dbf90dfb07aeb0095e3ca

  • SHA256

    250511ed887ddc0612673f13fc441af5aa751420f535b1a60afa3497e92db82f

  • SHA512

    0f545209dea6b18e7d1ff9c13e2ff43eb041178ac6cf7ea3ea3dc184f2426fb9b1a9f666149223c8ce3a19ab0477b7d62048de8ba2814449b895c94398788392

  • SSDEEP

    6144:hG9uWlaCYOiPjJgY9nEDsfxpQ8BLAj/B/+QNJBXku9Hy/v28sQhMYqvohQ:hCiC1WO+IsfxKKQNJJkMHEvbsQhjq7

Score
8/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      589a8b7e459c1cddad5fb7df2bebcf02

    • Size

      341KB

    • MD5

      589a8b7e459c1cddad5fb7df2bebcf02

    • SHA1

      f0587207cda9dd1cff9dbf90dfb07aeb0095e3ca

    • SHA256

      250511ed887ddc0612673f13fc441af5aa751420f535b1a60afa3497e92db82f

    • SHA512

      0f545209dea6b18e7d1ff9c13e2ff43eb041178ac6cf7ea3ea3dc184f2426fb9b1a9f666149223c8ce3a19ab0477b7d62048de8ba2814449b895c94398788392

    • SSDEEP

      6144:hG9uWlaCYOiPjJgY9nEDsfxpQ8BLAj/B/+QNJBXku9Hy/v28sQhMYqvohQ:hCiC1WO+IsfxKKQNJJkMHEvbsQhjq7

    Score
    8/10
    persistencespywarestealerupx

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks