Overview

overview

10

Static

static

7

9621157162...64.exe

windows7-x64

10

9621157162...64.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    96211571626f47f22b25adbc79dd2864

  • Size

    48KB

  • Sample

    240212-d1w4hseh74

  • MD5

    96211571626f47f22b25adbc79dd2864

  • SHA1

    c6520a64cde99af4870ac8503754a57a98659b18

  • SHA256

    0f73d72cda50a0e4f0087a1cced260fbb3d73067f8a7ac2e34bb5071ac461073

  • SHA512

    4c39c7f44221a4b7e4679cd97e5df70d8a183984c39f7556acf90fa8bdf3e04861f15d5e840540d5952441a08c14c8a5d6c1b9fe46313c05fa43dc54d144618f

  • SSDEEP

    1536:N3N9Nuo3X9SOpWiwXNQpZT9BcbHBbJNu:tN5SOAiwX6pB96vNu

Score
10/10
evasionspywarestealerupx

Malware Config

Targets

    • Target

      96211571626f47f22b25adbc79dd2864

    • Size

      48KB

    • MD5

      96211571626f47f22b25adbc79dd2864

    • SHA1

      c6520a64cde99af4870ac8503754a57a98659b18

    • SHA256

      0f73d72cda50a0e4f0087a1cced260fbb3d73067f8a7ac2e34bb5071ac461073

    • SHA512

      4c39c7f44221a4b7e4679cd97e5df70d8a183984c39f7556acf90fa8bdf3e04861f15d5e840540d5952441a08c14c8a5d6c1b9fe46313c05fa43dc54d144618f

    • SSDEEP

      1536:N3N9Nuo3X9SOpWiwXNQpZT9BcbHBbJNu:tN5SOAiwX6pB96vNu

    Score
    10/10
    evasionspywarestealerupx

    • Modifies firewall policy service

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks