Overview

overview

7

Static

static

3

winAPI.exe

windows10-1703-x64

7

Resubmissions

18-05-2024 22:03

240518-1ylw4aaa81 7

17-05-2024 15:56

240517-tdfq1sfb58 9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    winAPI.exe

  • Size

    28.5MB

  • Sample

    240518-1ylw4aaa81

  • MD5

    a6c1b27e646cf5904a69e45ffc8808d5

  • SHA1

    7cbafd874594bf3ee91cc49d7fa8ec686b4cad80

  • SHA256

    d9cd6884ad7518018efaa52cde9c0ed46fba959e9ea093c97e68004dbf2cad66

  • SHA512

    b55adebe3be59f15eb66a80d2b328d20e3a7fb1aa8d666e37195855f0a510e9abaefe0ad58ec20e14b1d3426995c9e54c6fe9491704db44931a2777eb5e8c2c8

  • SSDEEP

    393216:Em+sFHI7EzNFAUYl8XRQo/gCcT5NB35jmxEsYAwD6UWsNWcxjQl:Em+GCl3nNWclM

Score
7/10
pyinstallerspywarestealerupx

Malware Config

Targets

    • Target

      winAPI.exe

    • Size

      28.5MB

    • MD5

      a6c1b27e646cf5904a69e45ffc8808d5

    • SHA1

      7cbafd874594bf3ee91cc49d7fa8ec686b4cad80

    • SHA256

      d9cd6884ad7518018efaa52cde9c0ed46fba959e9ea093c97e68004dbf2cad66

    • SHA512

      b55adebe3be59f15eb66a80d2b328d20e3a7fb1aa8d666e37195855f0a510e9abaefe0ad58ec20e14b1d3426995c9e54c6fe9491704db44931a2777eb5e8c2c8

    • SSDEEP

      393216:Em+sFHI7EzNFAUYl8XRQo/gCcT5NB35jmxEsYAwD6UWsNWcxjQl:Em+GCl3nNWclM

    Score
    7/10
    pyinstallerspywarestealerupx

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks