d9120ad6f54d5b6022ad8cae7fcddbd84d1956cb297b880f571bcfa5289f958f | Triage

Sharing

General

Target

7de8f3c3d53fcf85e9e86db85a42a903
Size

118KB
Sample

240128-y5vrgaheb5
MD5

7de8f3c3d53fcf85e9e86db85a42a903
SHA1

87664fbc7b91b476d5d9a66c1c07e504a1dc6b5b
SHA256

d9120ad6f54d5b6022ad8cae7fcddbd84d1956cb297b880f571bcfa5289f958f
SHA512

5b4461046696606bf0379e77c0ddf2b329810b26061345a0545731c5c01446c28e638744985792741a1f9d9015e63e2e7ddf714a4586105a522e647a3843de3d
SSDEEP

3072:Eaep2EtMKoK5aR2QZArXx/OxvKFK9VeiIdU2fbdztnbXv:LeXMZ8asXxOkK9QTJhD

Score

7^/10

persistence spyware stealer upx

Malware Config

Targets

- Target
  
  7de8f3c3d53fcf85e9e86db85a42a903
- Size
  
  118KB
- MD5
  
  7de8f3c3d53fcf85e9e86db85a42a903
- SHA1
  
  87664fbc7b91b476d5d9a66c1c07e504a1dc6b5b
- SHA256
  
  d9120ad6f54d5b6022ad8cae7fcddbd84d1956cb297b880f571bcfa5289f958f
- SHA512
  
  5b4461046696606bf0379e77c0ddf2b329810b26061345a0545731c5c01446c28e638744985792741a1f9d9015e63e2e7ddf714a4586105a522e647a3843de3d
- SSDEEP
  
  3072:Eaep2EtMKoK5aR2QZArXx/OxvKFK9VeiIdU2fbdztnbXv:LeXMZ8asXxOkK9QTJhD
Score

7^/10

persistence spyware stealer upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealerupx

behavioral2