Overview

overview

7

Static

static

7

????.html

windows7-x64

1

????.html

windows10-2004-x64

1

u????????_...40.exe

windows7-x64

7

u????????_...40.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    ee537a5335c4658517c66e234cf2d6f4098e02668b2a1d4d09bd953effaf719b
  • Size 607KB
  • Sample240613-rytghashma
  • SHA256 ee537a5335c4658517c66e234cf2d6f4098e02668b2a1d4d09bd953effaf719b
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
bootkitpersistencespywarestealerupx

Malware Config

Targets

    • Target
      ????.html
    • Size 410B
    • SHA256 8d518dfe520c4464fe9fd28724ae8d9700ab0a6e5a648f9be8a85a526b095c87
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral1behavioral2
    • Target
      u????????_???U??????3.0???????@186_6840.exe
    • Size 633KB
    • SHA256 a27b060565a1bf76cc99b552984ba74faad13d226a6b4b4797e01c67f19c0560
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    bootkitpersistencespywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks