Overview

overview

7

Static

static

7

8f8122f528...AS.exe

windows7-x64

7

8f8122f528...AS.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8f8122f5288bd45291a93922a079e0e0_NEAS

  • Size

    225KB

  • Sample

    240507-h6rs7she37

  • MD5

    8f8122f5288bd45291a93922a079e0e0

  • SHA1

    53460f94b4c0608a0b2aef119785605ec4dc8d1c

  • SHA256

    b990e7f5247dc5b00282bb866c170787c104bd69012551bff180149d6fa01428

  • SHA512

    e01a54ac249ca8a4fb5993e87b1d9c9216e61d9b84348a63dc224ec47078ba11d6aa98a87cce2427a3e57b97cb8661e90e17da9181746c6d1c618d667a798835

  • SSDEEP

    3072:Xjr87S7Gnz55Eocq0g1eUfMJceuUiv20VCGomDv3V/7f1M8kmvmMCEz5:sZl2lqJxMJ3up+eCGDNDtR5CEz5

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      8f8122f5288bd45291a93922a079e0e0_NEAS

    • Size

      225KB

    • MD5

      8f8122f5288bd45291a93922a079e0e0

    • SHA1

      53460f94b4c0608a0b2aef119785605ec4dc8d1c

    • SHA256

      b990e7f5247dc5b00282bb866c170787c104bd69012551bff180149d6fa01428

    • SHA512

      e01a54ac249ca8a4fb5993e87b1d9c9216e61d9b84348a63dc224ec47078ba11d6aa98a87cce2427a3e57b97cb8661e90e17da9181746c6d1c618d667a798835

    • SSDEEP

      3072:Xjr87S7Gnz55Eocq0g1eUfMJceuUiv20VCGomDv3V/7f1M8kmvmMCEz5:sZl2lqJxMJ3up+eCGDNDtR5CEz5

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks