Overview

overview

7

Static

static

7

870ce18d6c...0N.exe

windows7-x64

7

870ce18d6c...0N.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    870ce18d6c20a665871419ea90ee4db0N.exe

  • Size

    359KB

  • Sample

    240726-gll7jszejk

  • MD5

    870ce18d6c20a665871419ea90ee4db0

  • SHA1

    26264484346064c5e7bd7748b9c959429960f59b

  • SHA256

    3a73dd2a2ab2b65e9f48283ca2fe7aea5a656d1dbaa9298deb0e012a980d5279

  • SHA512

    e69502bcffd8c9f336141b987aa985de55e0333d6ad58a5caaafbf98f2fb59a8fa87aaecf1db207136d387d4f4c72dd28580ca733583bd665b0cd9e009dfaf2e

  • SSDEEP

    3072:0og5Cck/aZhuDX4dCZFttttttxxFXXWIUzn:0GckyhCXbFttttttxxFXX9I

Score
7/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      870ce18d6c20a665871419ea90ee4db0N.exe

    • Size

      359KB

    • MD5

      870ce18d6c20a665871419ea90ee4db0

    • SHA1

      26264484346064c5e7bd7748b9c959429960f59b

    • SHA256

      3a73dd2a2ab2b65e9f48283ca2fe7aea5a656d1dbaa9298deb0e012a980d5279

    • SHA512

      e69502bcffd8c9f336141b987aa985de55e0333d6ad58a5caaafbf98f2fb59a8fa87aaecf1db207136d387d4f4c72dd28580ca733583bd665b0cd9e009dfaf2e

    • SSDEEP

      3072:0og5Cck/aZhuDX4dCZFttttttxxFXXWIUzn:0GckyhCXbFttttttxxFXX9I

    Score
    7/10
    discoverypersistencespywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks