Overview

overview

10

Static

static

10

e846d3cfad...db.exe

windows7-x64

9

e846d3cfad...db.exe

windows10-2004-x64

9

Resubmissions

05-03-2024 02:53

240305-ddkf7scf81 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e846d3cfad85b09f8fdb0460fff53cfda1176f4e9e420bf60ed88d39b1ef93db.exe

  • Size

    4.8MB

  • Sample

    240305-ddkf7scf81

  • MD5

    f364d1b15bb2049549d9084496ad239b

  • SHA1

    adbe8eb29c5e442a8515ba9c63a62126427ada8e

  • SHA256

    e846d3cfad85b09f8fdb0460fff53cfda1176f4e9e420bf60ed88d39b1ef93db

  • SHA512

    e94de32df4aebade28b24ba7007db2e002714b721e788de70f1f4080c72133742452b076da03530547cb18cea3d1c0cda84417d49810069076020b9fc610346f

  • SSDEEP

    98304:GL4AFoEMQEbPjwV/xQzp2FMhsTBfkIS2oFw5gmpp4k:26EMnb7kZw4FMaTRkItym

Score
10/10
spywarestealerupx

Malware Config

Targets

    • Target

      e846d3cfad85b09f8fdb0460fff53cfda1176f4e9e420bf60ed88d39b1ef93db.exe

    • Size

      4.8MB

    • MD5

      f364d1b15bb2049549d9084496ad239b

    • SHA1

      adbe8eb29c5e442a8515ba9c63a62126427ada8e

    • SHA256

      e846d3cfad85b09f8fdb0460fff53cfda1176f4e9e420bf60ed88d39b1ef93db

    • SHA512

      e94de32df4aebade28b24ba7007db2e002714b721e788de70f1f4080c72133742452b076da03530547cb18cea3d1c0cda84417d49810069076020b9fc610346f

    • SSDEEP

      98304:GL4AFoEMQEbPjwV/xQzp2FMhsTBfkIS2oFw5gmpp4k:26EMnb7kZw4FMaTRkItym

    Score
    9/10
    upxspywarestealer

    • UPX dump on OEP (original entry point)

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks