Overview

overview

7

Static

static

7

avg_remove...ta.exe

windows7-x64

7

avg_remove...ta.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    avg_remover_neshta.exe

  • Size

    3.5MB

  • Sample

    240521-y4qfcshc8v

  • MD5

    cbbc9f95b1679161de3eafa32b4f98ac

  • SHA1

    48bef65254353edb66552412d009c5becfc87432

  • SHA256

    c562b6b0616c72b2949bc5a956493a337525d556fa110e7e50948a1aa4ab2afa

  • SHA512

    b8cbcf7f80590cd72e7ad5356a4443f4ae9425345858766fd34d840a39137561a43fe09f69af7ede4a18d51c4651274fedafc6d254f504cd10f2bab96d29fa1b

  • SSDEEP

    98304:ofPSX9zajazj39M2T26lhf1seeO2b9Ua8AXj:ofPcPFHfV+j

Score
7/10
spywarestealerupx

Malware Config

Targets

    • Target

      avg_remover_neshta.exe

    • Size

      3.5MB

    • MD5

      cbbc9f95b1679161de3eafa32b4f98ac

    • SHA1

      48bef65254353edb66552412d009c5becfc87432

    • SHA256

      c562b6b0616c72b2949bc5a956493a337525d556fa110e7e50948a1aa4ab2afa

    • SHA512

      b8cbcf7f80590cd72e7ad5356a4443f4ae9425345858766fd34d840a39137561a43fe09f69af7ede4a18d51c4651274fedafc6d254f504cd10f2bab96d29fa1b

    • SSDEEP

      98304:ofPSX9zajazj39M2T26lhf1seeO2b9Ua8AXj:ofPcPFHfV+j

    Score
    7/10
    spywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks