Overview

overview

7

Static

static

7

8756ffdb09...9f.exe

windows7-x64

7

8756ffdb09...9f.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8756ffdb0965e104d4d1e4f88f2c0c9f

  • Size

    29KB

  • Sample

    240201-ttq7pabfer

  • MD5

    8756ffdb0965e104d4d1e4f88f2c0c9f

  • SHA1

    761e2a9f9d5e0748cc02d3f745b4bcb7185be651

  • SHA256

    30bcefa95f5c27bc3493f765c703ade5ec9bd5f6dbe67fd498c5c69ee8a431f4

  • SHA512

    dc6e0d5d3c2d687a6321657d8b7f28b4c857cd568f773a7e3622aa7118062a6d1479e5820e875bb7b57dee955445d2967453642e5e4276f7a98fee75b65209e5

  • SSDEEP

    768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFj:SKcR4mjD9r823Fj

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      8756ffdb0965e104d4d1e4f88f2c0c9f

    • Size

      29KB

    • MD5

      8756ffdb0965e104d4d1e4f88f2c0c9f

    • SHA1

      761e2a9f9d5e0748cc02d3f745b4bcb7185be651

    • SHA256

      30bcefa95f5c27bc3493f765c703ade5ec9bd5f6dbe67fd498c5c69ee8a431f4

    • SHA512

      dc6e0d5d3c2d687a6321657d8b7f28b4c857cd568f773a7e3622aa7118062a6d1479e5820e875bb7b57dee955445d2967453642e5e4276f7a98fee75b65209e5

    • SSDEEP

      768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFj:SKcR4mjD9r823Fj

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks