Overview

overview

7

Static

static

7

bb76f55af1...a8.exe

windows7-x64

7

bb76f55af1...a8.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    bb76f55af1c6d21cb61b595bc0650ea8

  • Size

    363KB

  • Sample

    240308-rh24psha33

  • MD5

    bb76f55af1c6d21cb61b595bc0650ea8

  • SHA1

    2e56c79cb7224a20ce2a4aa48f0cb0edeee3c8d4

  • SHA256

    5cb11dbb235ae708dc7ff012f5d8eb8e592494b5a0a645645ebbd7412db736ca

  • SHA512

    b2087b4432be36ada19d9da4a02a1cbad2058f2de0b33362f53b100ca1de3fd0d59b87d485090bc012f4dd52e795b8002321b870ae3e540c3c5dd1b81c6efee8

  • SSDEEP

    6144:hGKI8HsXg10K4XiuE356k9Nb2FmZW2X2+W9YIupNE7H+vX0pTNFWKDpL2Js9u9OX:hjMST4yuEYFIZWcUhuXkxNoKNixOX

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      bb76f55af1c6d21cb61b595bc0650ea8

    • Size

      363KB

    • MD5

      bb76f55af1c6d21cb61b595bc0650ea8

    • SHA1

      2e56c79cb7224a20ce2a4aa48f0cb0edeee3c8d4

    • SHA256

      5cb11dbb235ae708dc7ff012f5d8eb8e592494b5a0a645645ebbd7412db736ca

    • SHA512

      b2087b4432be36ada19d9da4a02a1cbad2058f2de0b33362f53b100ca1de3fd0d59b87d485090bc012f4dd52e795b8002321b870ae3e540c3c5dd1b81c6efee8

    • SSDEEP

      6144:hGKI8HsXg10K4XiuE356k9Nb2FmZW2X2+W9YIupNE7H+vX0pTNFWKDpL2Js9u9OX:hjMST4yuEYFIZWcUhuXkxNoKNixOX

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks