Overview

overview

7

Static

static

7

ae38766f3c...2a.exe

windows7-x64

7

ae38766f3c...2a.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    f1c8e3c3b1dd7ff8cd45454555d96b5f.zip

  • Size

    38KB

  • Sample

    240901-jx2gqavhkq

  • MD5

    8d14cd383453fd9348b1e35d3c876ca6

  • SHA1

    24484e0be833230473872011ffdee9f42213567f

  • SHA256

    4e67b597067aeb29e1e354399bdfa4c5f7258b39b12e8341e1189c720a48a894

  • SHA512

    e5a1a3ab4cd48d6b6475606623108ed72d5533689d60fdc15e30aed000df56668d79811d52d0ef5e27f65e6c0538a2031b45e54ac16f399dbd50828db6df003f

  • SSDEEP

    768:IaeLlgvw/MYwhpcCgo+Mb+FbnXHOsnS4XJV+mRY0xlnVtUIfjwfuK91BHs:IbLmYi4CabesnSYNxln9wfj9LM

Score
7/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      ae38766f3cbdf94e66bfbb26e7b448dc00fba3d24730ec74d082dac43eb0732a

    • Size

      41KB

    • MD5

      f1c8e3c3b1dd7ff8cd45454555d96b5f

    • SHA1

      ede4ac347515f54680834918736c04af85e5ef19

    • SHA256

      ae38766f3cbdf94e66bfbb26e7b448dc00fba3d24730ec74d082dac43eb0732a

    • SHA512

      710ebe17bbf5c4a9349a7cbe75c0cf308ccdd84784ed8455056e2f8aafd7dbe4381da10d7b07a68dee4b48acf37828deed18253559a2763e7abb49b0465f0349

    • SSDEEP

      768:eyX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIom++3zR2/vpKH34iXXm:egKcR4mjD9r829b3925QW

    Score
    7/10
    discoverypersistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks