Overview

overview

7

Static

static

7

9707047e45...88.exe

windows7-x64

7

9707047e45...88.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9707047e45f48b9f8234b305ed3e6588

  • Size

    168KB

  • Sample

    240212-neg3ksbg6s

  • MD5

    9707047e45f48b9f8234b305ed3e6588

  • SHA1

    c38d524bdb489346562c70276e64111ed186321d

  • SHA256

    7318fe1409141f71c78a3e0331deff95ea964492ed4a73d9f2ee4be983130fd6

  • SHA512

    385730900b1771b2b05a7bae226709622e2ad0d7c9fdac46dd781ed6940ff7d20a05ef7afa5ee4cf48a5a11f37a17ba03fb0c10631dd28f6b8320154a3abf1df

  • SSDEEP

    3072:Xjr87S7Gnz55EoVKcWmjRrz3KsPR/tD8IM9RQAEKvNXmg6rgHb:sZl2PGKspyIMTQ5kRtfb

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      9707047e45f48b9f8234b305ed3e6588

    • Size

      168KB

    • MD5

      9707047e45f48b9f8234b305ed3e6588

    • SHA1

      c38d524bdb489346562c70276e64111ed186321d

    • SHA256

      7318fe1409141f71c78a3e0331deff95ea964492ed4a73d9f2ee4be983130fd6

    • SHA512

      385730900b1771b2b05a7bae226709622e2ad0d7c9fdac46dd781ed6940ff7d20a05ef7afa5ee4cf48a5a11f37a17ba03fb0c10631dd28f6b8320154a3abf1df

    • SSDEEP

      3072:Xjr87S7Gnz55EoVKcWmjRrz3KsPR/tD8IM9RQAEKvNXmg6rgHb:sZl2PGKspyIMTQ5kRtfb

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks