Overview

overview

7

Static

static

7

8a873d393d...ac.exe

windows7-x64

7

8a873d393d...ac.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    8a873d393d449267511ee201522f9cac

  • Size

    483KB

  • Sample

    240202-zwhwzshgcj

  • MD5

    8a873d393d449267511ee201522f9cac

  • SHA1

    21618a0f270fb626c60c2c57b8942d1ada7c21d4

  • SHA256

    664a96da0e4974ca24974f6891b83133a20b10a91270e2b390afad9ffe0bc19f

  • SHA512

    9ff9728b0552a0fcec2ce18a68e417cf5c0df0dc06aa56cf8acdfe15abe5ace70b0899887082fa9a5a1b53edd78ae07018ca9b2ae1bde656ec9df7c2430524b1

  • SSDEEP

    12288:/hGturPQcxugD/4Jw/+1OuRvzE2kTDYCiHjJSIZWOh92N:/h77igjSwwOupzE2BHtD92N

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      8a873d393d449267511ee201522f9cac

    • Size

      483KB

    • MD5

      8a873d393d449267511ee201522f9cac

    • SHA1

      21618a0f270fb626c60c2c57b8942d1ada7c21d4

    • SHA256

      664a96da0e4974ca24974f6891b83133a20b10a91270e2b390afad9ffe0bc19f

    • SHA512

      9ff9728b0552a0fcec2ce18a68e417cf5c0df0dc06aa56cf8acdfe15abe5ace70b0899887082fa9a5a1b53edd78ae07018ca9b2ae1bde656ec9df7c2430524b1

    • SSDEEP

      12288:/hGturPQcxugD/4Jw/+1OuRvzE2kTDYCiHjJSIZWOh92N:/h77igjSwwOupzE2BHtD92N

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks