Overview

overview

10

Static

static

10

d72b0d780a...0e.exe

windows7-x64

9

d72b0d780a...0e.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d72b0d780abe701f1e2c3a5d66767cc35572135d69a24920f3d9156728b8310e

  • Size

    474KB

  • Sample

    240625-dldcvsxdqd

  • MD5

    302882f95628f80c44ad05b97aa8f334

  • SHA1

    52b2cdd7fb0b12244de2bd1e6ad5a3b9da0536c6

  • SHA256

    d72b0d780abe701f1e2c3a5d66767cc35572135d69a24920f3d9156728b8310e

  • SHA512

    c3bc922da498279461beef7b4e2ddf0aa07136d76aed1dd35b77bf6fe09d7ea50b26e5c39089f46ac26224482830568d4d408eba19da8b7ce27a5b1bb1e90b49

  • SSDEEP

    6144:/MAoVNLX+xhEGGozRcipS4mPE9SdOwp8vjDGze83iQNd9K48DmvE4VT7RmkwUysf:0AD/wTKjOqSdbp8vvQeWYWtNaUyv4Q6

Score
10/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      d72b0d780abe701f1e2c3a5d66767cc35572135d69a24920f3d9156728b8310e

    • Size

      474KB

    • MD5

      302882f95628f80c44ad05b97aa8f334

    • SHA1

      52b2cdd7fb0b12244de2bd1e6ad5a3b9da0536c6

    • SHA256

      d72b0d780abe701f1e2c3a5d66767cc35572135d69a24920f3d9156728b8310e

    • SHA512

      c3bc922da498279461beef7b4e2ddf0aa07136d76aed1dd35b77bf6fe09d7ea50b26e5c39089f46ac26224482830568d4d408eba19da8b7ce27a5b1bb1e90b49

    • SSDEEP

      6144:/MAoVNLX+xhEGGozRcipS4mPE9SdOwp8vjDGze83iQNd9K48DmvE4VT7RmkwUysf:0AD/wTKjOqSdbp8vvQeWYWtNaUyv4Q6

    Score
    9/10
    persistencespywarestealerupx

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks