Overview

overview

7

Static

static

7

65e9d1f599...f7.exe

windows7-x64

7

65e9d1f599...f7.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    65e9d1f5999af55c58c30ae8fa4d00f7

  • Size

    93KB

  • Sample

    240118-ys373sgdbr

  • MD5

    65e9d1f5999af55c58c30ae8fa4d00f7

  • SHA1

    0edc9e43a3f7b919c62f06cff4f310cf05438a2a

  • SHA256

    21f5f5caa41a875529a4f9e576b3466554389c941ee00b18ae5ba9fbd7c5b890

  • SHA512

    c2bd3b9b79c1536de6c1e553dcf89f6c289bba901c65e06c1fd4cd62edcae72ba69cb96129c74a1dad0832d3ce97949c2f1b68d07201efda732a3583f201e5b3

  • SSDEEP

    1536:SKcR4mjD9r823FTHlBg+UR088p55wNLJrdI/Iab0vaciX/FipdsoeuumvX1qqn7:SKcWmjRrz3TdUR0TwvrdI8vacmqzFz7

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      65e9d1f5999af55c58c30ae8fa4d00f7

    • Size

      93KB

    • MD5

      65e9d1f5999af55c58c30ae8fa4d00f7

    • SHA1

      0edc9e43a3f7b919c62f06cff4f310cf05438a2a

    • SHA256

      21f5f5caa41a875529a4f9e576b3466554389c941ee00b18ae5ba9fbd7c5b890

    • SHA512

      c2bd3b9b79c1536de6c1e553dcf89f6c289bba901c65e06c1fd4cd62edcae72ba69cb96129c74a1dad0832d3ce97949c2f1b68d07201efda732a3583f201e5b3

    • SSDEEP

      1536:SKcR4mjD9r823FTHlBg+UR088p55wNLJrdI/Iab0vaciX/FipdsoeuumvX1qqn7:SKcWmjRrz3TdUR0TwvrdI8vacmqzFz7

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks