Overview

overview

10

Static

static

10

61f86ffa3c...bd.exe

windows7-x64

8

61f86ffa3c...bd.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    61f86ffa3c979fcbe92708869f287e8ddafdf849b5c1e6a1ab4457c0671ebbbd

  • Size

    7.8MB

  • Sample

    241009-qdsh2aveqj

  • MD5

    a8552c7376b5bd5ebb98d0c2e8671e1a

  • SHA1

    73902a9c6225b7933b5ffc4d5a2aca63aa424fde

  • SHA256

    61f86ffa3c979fcbe92708869f287e8ddafdf849b5c1e6a1ab4457c0671ebbbd

  • SHA512

    34688bab5fd32cf4e505cc79b7108bbd8ee6281c16417b1eda14a543f59561f2aef33bbdbafc69d5ccf556c6574b61bdb5db5cbe86b8f0646277b4f3dd286465

  • SSDEEP

    98304:LhCCevWQodtVPdig1QOu2AA8lbpHhB8sr3xeRPFSEeX6v8k4kxnDHYS2nwFJBAUU:d74A8lV/meXJ9eDHYS2nwFJVrk+M

Score
10/10
blackmooncredential_accessdiscoverystealerupx

Malware Config

Targets

    • Target

      61f86ffa3c979fcbe92708869f287e8ddafdf849b5c1e6a1ab4457c0671ebbbd

    • Size

      7.8MB

    • MD5

      a8552c7376b5bd5ebb98d0c2e8671e1a

    • SHA1

      73902a9c6225b7933b5ffc4d5a2aca63aa424fde

    • SHA256

      61f86ffa3c979fcbe92708869f287e8ddafdf849b5c1e6a1ab4457c0671ebbbd

    • SHA512

      34688bab5fd32cf4e505cc79b7108bbd8ee6281c16417b1eda14a543f59561f2aef33bbdbafc69d5ccf556c6574b61bdb5db5cbe86b8f0646277b4f3dd286465

    • SSDEEP

      98304:LhCCevWQodtVPdig1QOu2AA8lbpHhB8sr3xeRPFSEeX6v8k4kxnDHYS2nwFJBAUU:d74A8lV/meXJ9eDHYS2nwFJVrk+M

    Score
    8/10
    credential_accessdiscoverystealerupx

    • Uses browser remote debugging

      Can be used control the browser and steal sensitive information such as credentials and session cookies.

      credential_accessstealer

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks