Overview

overview

10

Static

static

3

c944d68dff...04.exe

windows7-x64

10

c944d68dff...04.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c944d68dffe67e2d03f86ccef6304504

  • Size

    183KB

  • Sample

    240314-wq7flsdb75

  • MD5

    c944d68dffe67e2d03f86ccef6304504

  • SHA1

    6334a2a9be21fee3d10ba747f24b020c2ac01a2c

  • SHA256

    3569b1de9692e5ca5c8a7fb73d52bdabd6bddfd652cab6d10cfb2c2a69c96e6d

  • SHA512

    e4839499736c9d8693167e2c53d87065a2f49d72397bcce3d72af44cfdb194d33cdf2841891b85628507c3964e79fa8d18b2750627d7c9944a0891d379648658

  • SSDEEP

    3072:RIL4cewfF6FmgF63CLjPentd85YPx37jfA0YC5HE9WVHzYmQWuB:RMY4FobF63OutzPV3fpYCxMkH7u

Score
10/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      c944d68dffe67e2d03f86ccef6304504

    • Size

      183KB

    • MD5

      c944d68dffe67e2d03f86ccef6304504

    • SHA1

      6334a2a9be21fee3d10ba747f24b020c2ac01a2c

    • SHA256

      3569b1de9692e5ca5c8a7fb73d52bdabd6bddfd652cab6d10cfb2c2a69c96e6d

    • SHA512

      e4839499736c9d8693167e2c53d87065a2f49d72397bcce3d72af44cfdb194d33cdf2841891b85628507c3964e79fa8d18b2750627d7c9944a0891d379648658

    • SSDEEP

      3072:RIL4cewfF6FmgF63CLjPentd85YPx37jfA0YC5HE9WVHzYmQWuB:RMY4FobF63OutzPV3fpYCxMkH7u

    Score
    10/10
    persistencespywarestealerupx

    • Modifies WinLogon for persistence

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks