Overview

overview

7

Static

static

7

5958547ed8...85.exe

windows7-x64

7

5958547ed8...85.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    5958547ed8657e03e97ea115f6620685

  • Size

    178KB

  • Sample

    240113-zaa91sega8

  • MD5

    5958547ed8657e03e97ea115f6620685

  • SHA1

    d17d55dda9943bd27e2e109dc152b6d6d5b0f890

  • SHA256

    e9f21f7a183286663b924fec9ba05ae12371ae025cd90a1c266a4de5715e1713

  • SHA512

    de0b6763f14b3bdca07dfc68e1c5692f4174edf4bb88bd884254cca8931925d45f21622c615b2e0289cce9a2559a8a75edcc4d1591759eef628a09d4f5eb538c

  • SSDEEP

    3072:SKcWmjRrz3b3E9VJowxP+urbyqo0LNj13dzfFeT9vCSVRAn0YJGMbzKRdicMTtaD:hG4TGwB7NfFeTJCSVTyGmW51iq9

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      5958547ed8657e03e97ea115f6620685

    • Size

      178KB

    • MD5

      5958547ed8657e03e97ea115f6620685

    • SHA1

      d17d55dda9943bd27e2e109dc152b6d6d5b0f890

    • SHA256

      e9f21f7a183286663b924fec9ba05ae12371ae025cd90a1c266a4de5715e1713

    • SHA512

      de0b6763f14b3bdca07dfc68e1c5692f4174edf4bb88bd884254cca8931925d45f21622c615b2e0289cce9a2559a8a75edcc4d1591759eef628a09d4f5eb538c

    • SSDEEP

      3072:SKcWmjRrz3b3E9VJowxP+urbyqo0LNj13dzfFeT9vCSVRAn0YJGMbzKRdicMTtaD:hG4TGwB7NfFeTJCSVTyGmW51iq9

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks