Overview

overview

7

Static

static

7

75ac4a3770...91.exe

windows7-x64

7

75ac4a3770...91.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    75ac4a37707dce651c5e15edd0534a91

  • Size

    347KB

  • Sample

    240125-2fe69sgfe7

  • MD5

    75ac4a37707dce651c5e15edd0534a91

  • SHA1

    adbb37f0f47a2523b45af56d554802d543a5ae9d

  • SHA256

    638f57673ea15210d6ea5f8b37e2b9050d36180e2a46bb31ad632fa5e2957762

  • SHA512

    6c18eef98601a078065f1bb7c22ae930db383be723a1aa671464c05da824e1c954bdba986b0f47f29c1e549c5bd53d4cdd6804e2d6f063718761eca063febddf

  • SSDEEP

    6144:hGyGE2mTdW+O3wb2riLCHdTG/3dpIR/x5GrlEjjk5M7pWGHjokAw:h31W+MiLCHdTG3Xi/6lE/KM7ZDYw

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      75ac4a37707dce651c5e15edd0534a91

    • Size

      347KB

    • MD5

      75ac4a37707dce651c5e15edd0534a91

    • SHA1

      adbb37f0f47a2523b45af56d554802d543a5ae9d

    • SHA256

      638f57673ea15210d6ea5f8b37e2b9050d36180e2a46bb31ad632fa5e2957762

    • SHA512

      6c18eef98601a078065f1bb7c22ae930db383be723a1aa671464c05da824e1c954bdba986b0f47f29c1e549c5bd53d4cdd6804e2d6f063718761eca063febddf

    • SSDEEP

      6144:hGyGE2mTdW+O3wb2riLCHdTG/3dpIR/x5GrlEjjk5M7pWGHjokAw:h31W+MiLCHdTG3Xi/6lE/KM7ZDYw

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks