Overview

overview

7

Static

static

7

b48d14f18e...94.exe

windows7-x64

7

b48d14f18e...94.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b48d14f18e8a4f62750fb8f34bff0294

  • Size

    86KB

  • Sample

    240305-m6dzkadc3x

  • MD5

    b48d14f18e8a4f62750fb8f34bff0294

  • SHA1

    1bd28671c0bd960d622b989edf2127c01797e294

  • SHA256

    ad6a17839b06b2e3dfeec19da443687b6afb9df3bf42189e2cf7a3811de8803b

  • SHA512

    20b1987599f433b7c3144db6047372b27d086b907607574d6b236eeed988ea4b482e045b66f465b39df2286b71af23cd8f0b2cb953121d6ad1d88928876e5fd7

  • SSDEEP

    1536:s9Z3KcR4mjD9r8226+M9Z3KcR4mjD9r8226+SymWNJC3eg:sr3KcWmjRrzSMr3KcWmjRrzSSymWvC3p

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      b48d14f18e8a4f62750fb8f34bff0294

    • Size

      86KB

    • MD5

      b48d14f18e8a4f62750fb8f34bff0294

    • SHA1

      1bd28671c0bd960d622b989edf2127c01797e294

    • SHA256

      ad6a17839b06b2e3dfeec19da443687b6afb9df3bf42189e2cf7a3811de8803b

    • SHA512

      20b1987599f433b7c3144db6047372b27d086b907607574d6b236eeed988ea4b482e045b66f465b39df2286b71af23cd8f0b2cb953121d6ad1d88928876e5fd7

    • SSDEEP

      1536:s9Z3KcR4mjD9r8226+M9Z3KcR4mjD9r8226+SymWNJC3eg:sr3KcWmjRrzSMr3KcWmjRrzSSymWvC3p

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks