Overview

overview

7

Static

static

7

7f5c2dc7b4...f1.exe

windows7-x64

7

7f5c2dc7b4...f1.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    7f5c2dc7b4d3f3cbeeef80e6a02152f1

  • Size

    124KB

  • Sample

    240129-kb93eadgf2

  • MD5

    7f5c2dc7b4d3f3cbeeef80e6a02152f1

  • SHA1

    e0794ad2afa953cf98e0fcfd9054ed8c48689289

  • SHA256

    77e6405a37e78284910b61a83e7431515b6a3ca63ba6eb7d3174c80c320a5a64

  • SHA512

    539ece9c08fab6cee018759212bd084041d4dbdf08f61a28290492dd4304b06c44c27e463e792bbe9d7480eb7e3bf6044b0b1f2d7a8f8a600245b3e4d32586f1

  • SSDEEP

    3072:SKcWmjRrz3lIrCSH42Fk67S6CRseBjcRkRNWu55g9f:hGlI2JsgxjBwmPWu55gR

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      7f5c2dc7b4d3f3cbeeef80e6a02152f1

    • Size

      124KB

    • MD5

      7f5c2dc7b4d3f3cbeeef80e6a02152f1

    • SHA1

      e0794ad2afa953cf98e0fcfd9054ed8c48689289

    • SHA256

      77e6405a37e78284910b61a83e7431515b6a3ca63ba6eb7d3174c80c320a5a64

    • SHA512

      539ece9c08fab6cee018759212bd084041d4dbdf08f61a28290492dd4304b06c44c27e463e792bbe9d7480eb7e3bf6044b0b1f2d7a8f8a600245b3e4d32586f1

    • SSDEEP

      3072:SKcWmjRrz3lIrCSH42Fk67S6CRseBjcRkRNWu55g9f:hGlI2JsgxjBwmPWu55gR

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks