Overview

overview

7

Static

static

7

78f5b8a688...95.exe

windows7-x64

7

78f5b8a688...95.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    78f5b8a688028b7c6b38e0a0ba717895

  • Size

    124KB

  • Sample

    240127-b7qh7scbem

  • MD5

    78f5b8a688028b7c6b38e0a0ba717895

  • SHA1

    3c7a2cd2092e8373d2999ad5f925217e7a80b3c4

  • SHA256

    188b8b0b5d4245b41cda82e0ad3accddcbb4b38559301f99466faebe72551c0f

  • SHA512

    0bb43090e994b1247704f097f52c000670d76ebd1f7f56aa9d7d090bc7833d640bae90bc24b614ad32d74f1567f9b622f5792f35efb093709224b7341f80900d

  • SSDEEP

    3072:SKcWmjRrz3C94WV4AuZQH1B3imCMPLoJ/RXHfNf:hGmV4TZQLymCMcNRXHfJ

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      78f5b8a688028b7c6b38e0a0ba717895

    • Size

      124KB

    • MD5

      78f5b8a688028b7c6b38e0a0ba717895

    • SHA1

      3c7a2cd2092e8373d2999ad5f925217e7a80b3c4

    • SHA256

      188b8b0b5d4245b41cda82e0ad3accddcbb4b38559301f99466faebe72551c0f

    • SHA512

      0bb43090e994b1247704f097f52c000670d76ebd1f7f56aa9d7d090bc7833d640bae90bc24b614ad32d74f1567f9b622f5792f35efb093709224b7341f80900d

    • SSDEEP

      3072:SKcWmjRrz3C94WV4AuZQH1B3imCMPLoJ/RXHfNf:hGmV4TZQLymCMcNRXHfJ

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks