Overview

overview

7

Static

static

7

7969c56301...d5.exe

windows7-x64

7

7969c56301...d5.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7969c563010ed847c9f4b94137b124d5

  • Size

    400KB

  • Sample

    240127-gbqrzseda4

  • MD5

    7969c563010ed847c9f4b94137b124d5

  • SHA1

    b165c30df16a70cee0e4f49dec0690d4f65b56d9

  • SHA256

    a6e12b9f0ed8a1a86799d234f9040f32a75f2eaaac77df1e3dcf55451f5ba3b1

  • SHA512

    e79f5fb59c318fd37dce7428875681c6debad77f2d417f9aa90624f40d707d66d3764cf4fcbcc1f77d5549689014ef0d914011857f8a79d55a71eff614c5d4bf

  • SSDEEP

    12288:smP5ESb1HhPj65dM14e7urPXYfs5ftqYY6HVl9h:3x5BPj6fJe79Cftbhr

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      7969c563010ed847c9f4b94137b124d5

    • Size

      400KB

    • MD5

      7969c563010ed847c9f4b94137b124d5

    • SHA1

      b165c30df16a70cee0e4f49dec0690d4f65b56d9

    • SHA256

      a6e12b9f0ed8a1a86799d234f9040f32a75f2eaaac77df1e3dcf55451f5ba3b1

    • SHA512

      e79f5fb59c318fd37dce7428875681c6debad77f2d417f9aa90624f40d707d66d3764cf4fcbcc1f77d5549689014ef0d914011857f8a79d55a71eff614c5d4bf

    • SSDEEP

      12288:smP5ESb1HhPj65dM14e7urPXYfs5ftqYY6HVl9h:3x5BPj6fJe79Cftbhr

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks