Overview

overview

7

Static

static

3

test.tri.age.albi.exe

windows7-x64

7

test.tri.age.albi.exe

windows10-2004-x64

7

Resubmissions

19-04-2024 22:08

240419-12b63agg45 7

19-04-2024 16:16

240419-tqw9jahg2y 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    test.tri.age.albi.exe

  • Size

    23.0MB

  • Sample

    240419-tqw9jahg2y

  • MD5

    f5ca45e07dfce923acce9d3160551f25

  • SHA1

    92b09f6782032c1322ffd1cb2ed4e29a0da294c0

  • SHA256

    3ba761720a2cccea2b82c99f5f274049fb6686146c5e876a6dbbc1e97f90b978

  • SHA512

    9d3dcf5d621fa4fe001c160f33e4874bcb196a2a19e659218a41581535df592d95f4ae3ade7ce73b9159831acbeca768b664f12adc265c4e2b645b4605b4fe07

  • SSDEEP

    393216:NWvz+XOVzrlICtL+9qzTREnBSVkRIrY874hDgD7fEUyIPIYvvzm66WCo6:4z+XOxiA+9q/YzcY874Vq7fEbIPb0Vo6

Score
7/10
pyinstallerspywarestealerupx

Malware Config

Targets

    • Target

      test.tri.age.albi.exe

    • Size

      23.0MB

    • MD5

      f5ca45e07dfce923acce9d3160551f25

    • SHA1

      92b09f6782032c1322ffd1cb2ed4e29a0da294c0

    • SHA256

      3ba761720a2cccea2b82c99f5f274049fb6686146c5e876a6dbbc1e97f90b978

    • SHA512

      9d3dcf5d621fa4fe001c160f33e4874bcb196a2a19e659218a41581535df592d95f4ae3ade7ce73b9159831acbeca768b664f12adc265c4e2b645b4605b4fe07

    • SSDEEP

      393216:NWvz+XOVzrlICtL+9qzTREnBSVkRIrY874hDgD7fEUyIPIYvvzm66WCo6:4z+XOxiA+9q/YzcY874Vq7fEbIPb0Vo6

    Score
    7/10
    upxspywarestealer

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Resource Development

Reconnaissance

Tasks