Overview

overview

7

Static

static

7

b6efeb17d0...f2.exe

windows7-x64

7

b6efeb17d0...f2.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b6efeb17d03830ba0a5b3e1fe6e3a5f2

  • Size

    75KB

  • Sample

    240306-j1k9xaga22

  • MD5

    b6efeb17d03830ba0a5b3e1fe6e3a5f2

  • SHA1

    cec99cfaed0e87f2c8e7363b26e7579c99864493

  • SHA256

    0710a15fe0b38f9786531c1196e57689038bdd24298377c5180c5783da65470a

  • SHA512

    af51b30f0abb156e2a8b14a9a720164c4e7daf8ec8a13e7203ef7ecde49506c1447ae0d6894d34abb90612688e7a12acd9f2008492af6eceb06559d8d9c9acb2

  • SSDEEP

    1536:SKcR4mjD9r823FHKcR4mjD9r823FOYqUKxrUHARH:SKcWmjRrz3ZKcWmjRrz30naHAl

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      b6efeb17d03830ba0a5b3e1fe6e3a5f2

    • Size

      75KB

    • MD5

      b6efeb17d03830ba0a5b3e1fe6e3a5f2

    • SHA1

      cec99cfaed0e87f2c8e7363b26e7579c99864493

    • SHA256

      0710a15fe0b38f9786531c1196e57689038bdd24298377c5180c5783da65470a

    • SHA512

      af51b30f0abb156e2a8b14a9a720164c4e7daf8ec8a13e7203ef7ecde49506c1447ae0d6894d34abb90612688e7a12acd9f2008492af6eceb06559d8d9c9acb2

    • SSDEEP

      1536:SKcR4mjD9r823FHKcR4mjD9r823FOYqUKxrUHARH:SKcWmjRrz3ZKcWmjRrz30naHAl

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks