Overview

overview

7

Static

static

7

e07c62d6ef...f0.exe

windows7-x64

7

e07c62d6ef...f0.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    e07c62d6ef8329d4b411109b4ea558f0

  • Size

    487KB

  • Sample

    240327-b92z1shg25

  • MD5

    e07c62d6ef8329d4b411109b4ea558f0

  • SHA1

    1f78928d2c702846e419ba3197700750fd83d218

  • SHA256

    f8619201867136638671715fa0bfd79e5ee630de294ac503466fb3e0eaf8291f

  • SHA512

    f803b37ad392bfdd4291b1e47e38e9865cc6e2cccaaee8c0b8c54397d065b9b3e444d4ac32d147d245b832c02bdc861cbd1dfaa17ece320fca120a4e283425e9

  • SSDEEP

    12288:h3WrcA/mHlbmYSD9wJaXJDK12FO1h1MVPcc/Cuit0fNU:h32r/mHl6dJUaZDK12F+h1MWctwGU

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      e07c62d6ef8329d4b411109b4ea558f0

    • Size

      487KB

    • MD5

      e07c62d6ef8329d4b411109b4ea558f0

    • SHA1

      1f78928d2c702846e419ba3197700750fd83d218

    • SHA256

      f8619201867136638671715fa0bfd79e5ee630de294ac503466fb3e0eaf8291f

    • SHA512

      f803b37ad392bfdd4291b1e47e38e9865cc6e2cccaaee8c0b8c54397d065b9b3e444d4ac32d147d245b832c02bdc861cbd1dfaa17ece320fca120a4e283425e9

    • SSDEEP

      12288:h3WrcA/mHlbmYSD9wJaXJDK12FO1h1MVPcc/Cuit0fNU:h32r/mHl6dJUaZDK12F+h1MWctwGU

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks