Overview

overview

10

Static

static

3

ad67b6fac6...15.exe

windows7-x64

10

ad67b6fac6...15.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ad67b6fac6be889bf3845b5be75e0715

  • Size

    164KB

  • Sample

    240229-cek9fsba59

  • MD5

    ad67b6fac6be889bf3845b5be75e0715

  • SHA1

    8d1e7dda492d6dddcead797b52979c1baffc5a77

  • SHA256

    ec155271368deb487e9b9511261102289b09e8fdeaf81138c8e181746cf261bc

  • SHA512

    44b3ab593b3cf106449eff199fbaa773eb8cbe0fb7174cff3257b6d968e85a9bbfe2516b7a5bb625a73841232f369c21cab0cde11a17ad4e92f319e742a7c664

  • SSDEEP

    3072:Ay11Z4oCZpZ+2/u3jCkwwyqN/GJ2KfJ0xVdUpLughILqY4cuGUXwdJyv:zr4C2/CjCk5yi/02bdUgdzJUXy

Score
10/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      ad67b6fac6be889bf3845b5be75e0715

    • Size

      164KB

    • MD5

      ad67b6fac6be889bf3845b5be75e0715

    • SHA1

      8d1e7dda492d6dddcead797b52979c1baffc5a77

    • SHA256

      ec155271368deb487e9b9511261102289b09e8fdeaf81138c8e181746cf261bc

    • SHA512

      44b3ab593b3cf106449eff199fbaa773eb8cbe0fb7174cff3257b6d968e85a9bbfe2516b7a5bb625a73841232f369c21cab0cde11a17ad4e92f319e742a7c664

    • SSDEEP

      3072:Ay11Z4oCZpZ+2/u3jCkwwyqN/GJ2KfJ0xVdUpLughILqY4cuGUXwdJyv:zr4C2/CjCk5yi/02bdUgdzJUXy

    Score
    10/10
    persistencespywarestealerupx

    • Modifies WinLogon for persistence

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks