246333010e12b606190c247d03270fedd1ae76186fe14b0172a9fe15e6d50070 | Triage

Submit
Reports

Overview

overview

Static

static

246333010e...70.exe

windows7-x64

9

246333010e...70.exe

windows10-2004-x64

9

Sharing

General

Target

246333010e12b606190c247d03270fedd1ae76186fe14b0172a9fe15e6d50070
Size

266KB
Sample

240428-x5ff4sfb23
MD5

1f9b41e5897be069ac12e8ed31bbdff0
SHA1

a2a25321ae0795f7c153f864fd1129ed7c04463d
SHA256

246333010e12b606190c247d03270fedd1ae76186fe14b0172a9fe15e6d50070
SHA512

167532565ce8158d46beafc461c8f87a394fc6c18af93f9999da5a4069130af12fee1b0b5932bba2e05328e450226398e5be452c9b853a91cce0afc53949434a
SSDEEP

6144:oZb2qa7hSrXqp2Rwsg6e9Q7OrM/ZVkLzL:ooq0hSbqcwtIWMxVkz

Score

10^/10

persistence spyware stealer upx

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

246333010e12b606190c247d03270fedd1ae76186fe14b0172a9fe15e6d50070.exe

Resource

win7-20240419-en

persistence spyware stealer upx

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

246333010e12b606190c247d03270fedd1ae76186fe14b0172a9fe15e6d50070.exe

Resource

win10v2004-20240426-en

persistence spyware stealer upx

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  246333010e12b606190c247d03270fedd1ae76186fe14b0172a9fe15e6d50070
- Size
  
  266KB
- MD5
  
  1f9b41e5897be069ac12e8ed31bbdff0
- SHA1
  
  a2a25321ae0795f7c153f864fd1129ed7c04463d
- SHA256
  
  246333010e12b606190c247d03270fedd1ae76186fe14b0172a9fe15e6d50070
- SHA512
  
  167532565ce8158d46beafc461c8f87a394fc6c18af93f9999da5a4069130af12fee1b0b5932bba2e05328e450226398e5be452c9b853a91cce0afc53949434a
- SSDEEP
  
  6144:oZb2qa7hSrXqp2Rwsg6e9Q7OrM/ZVkLzL:ooq0hSbqcwtIWMxVkz
Score

9^/10

persistence spyware stealer upx
- UPX dump on OEP (original entry point)
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealerupx

behavioral2

persistencespywarestealerupx

© 2018-2024

Terms | Privacy