Overview

overview

8

Static

static

5

Optimizer.exe

windows11-21h2-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Optimizer.exe

  • Size

    159KB

  • Sample

    241126-ta6g9stqfp

  • MD5

    59c1d1b1d0e5447efc7dea6087ecee39

  • SHA1

    b824b16e781a3238dfe9bbe3b34990a1054c48d5

  • SHA256

    c1d0c89274c04a62eed5c41f5fe592e95dbd4e4e2e25b6000ebb5ddefd2124cb

  • SHA512

    cba7c13bb2e9267d2c78bb9f98fcca1a8b2c84ad6cd27cae9e0b701107c944d292dfdc032bd8a90c4877c04b173703ff8a66246002ab9bdb85e3604a843a5ddc

  • SSDEEP

    3072:+vjciRUMVLEK/NwhxaE0UojUPeKW74MELtomx9avYFZloH8:UjeJcQ900eWZxWvYFZloH8

Score
8/10
discoveryexploitspywarestealerupx

Malware Config

Targets

    • Target

      Optimizer.exe

    • Size

      159KB

    • MD5

      59c1d1b1d0e5447efc7dea6087ecee39

    • SHA1

      b824b16e781a3238dfe9bbe3b34990a1054c48d5

    • SHA256

      c1d0c89274c04a62eed5c41f5fe592e95dbd4e4e2e25b6000ebb5ddefd2124cb

    • SHA512

      cba7c13bb2e9267d2c78bb9f98fcca1a8b2c84ad6cd27cae9e0b701107c944d292dfdc032bd8a90c4877c04b173703ff8a66246002ab9bdb85e3604a843a5ddc

    • SSDEEP

      3072:+vjciRUMVLEK/NwhxaE0UojUPeKW74MELtomx9avYFZloH8:UjeJcQ900eWZxWvYFZloH8

    Score
    8/10
    discoveryexploitspywarestealerupx

    • Drops file in Drivers directory

    • Possible privilege escalation attempt

      exploit

    • Modifies file permissions

      discovery

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops desktop.ini file(s)

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks