Overview

overview

7

Static

static

3

f71a219394...f6.exe

windows7-x64

7

f71a219394...f6.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    f71a21939443fb450a22361c0d1029aadcd5ed011a062e67cdef0dc9dd393ff6

  • Size

    916KB

  • Sample

    240825-r29b5azalc

  • MD5

    48936a82b076a2375403bc368b184b7e

  • SHA1

    e34bb269bdd1fef573fa0cf18f28d7019e52d850

  • SHA256

    f71a21939443fb450a22361c0d1029aadcd5ed011a062e67cdef0dc9dd393ff6

  • SHA512

    fbf058e48c4baba3e2f978ad7d1ee6042ec915ffc97fce11e4b9a95d4583a97adfe8a0f0aad36999c4e1364b1694da766da6d2ad3c08f64dbd87c18d74adf89e

  • SSDEEP

    12288:YD/xbfqFZQriJWicJY7Ci8rwh6neOmrB1XB4nj9t8nC:YDxfqjQGJ/cG7n8roQj9mn

Score
7/10
discoveryspywarestealerupx

Malware Config

Targets

    • Target

      f71a21939443fb450a22361c0d1029aadcd5ed011a062e67cdef0dc9dd393ff6

    • Size

      916KB

    • MD5

      48936a82b076a2375403bc368b184b7e

    • SHA1

      e34bb269bdd1fef573fa0cf18f28d7019e52d850

    • SHA256

      f71a21939443fb450a22361c0d1029aadcd5ed011a062e67cdef0dc9dd393ff6

    • SHA512

      fbf058e48c4baba3e2f978ad7d1ee6042ec915ffc97fce11e4b9a95d4583a97adfe8a0f0aad36999c4e1364b1694da766da6d2ad3c08f64dbd87c18d74adf89e

    • SSDEEP

      12288:YD/xbfqFZQriJWicJY7Ci8rwh6neOmrB1XB4nj9t8nC:YDxfqjQGJ/cG7n8roQj9mn

    Score
    7/10
    discoveryspywarestealerupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks