Overview

overview

10

Static

static

3

0622ea76d4...8N.exe

windows7-x64

10

0622ea76d4...8N.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0622ea76d4ec7989443630c6ea1c60c2236dab91f0e213e779524984cf16a4e8N.exe

  • Size

    134KB

  • Sample

    241130-fzr5aayngr

  • MD5

    9a437de4ef00f395670628e3baa9df50

  • SHA1

    0f7be408136c02ab30e65f20a86f817543d14f97

  • SHA256

    0622ea76d4ec7989443630c6ea1c60c2236dab91f0e213e779524984cf16a4e8

  • SHA512

    db4f619de8b6990a60a9db8dd9c74aed2a01bf0be79d6ae0d62ae4c24df0bcae31f3b8dd681a141ff12ab1d0bd70f5328989103920486e91855a692d3afc5336

  • SSDEEP

    3072:iR/yGECL2aZwHj2saYDZSpiXL/0swl8scsNLPlVGdQIb3:e/cCL2aZwHXVDZxXL/4l5c8Ryb3

Score
10/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      0622ea76d4ec7989443630c6ea1c60c2236dab91f0e213e779524984cf16a4e8N.exe

    • Size

      134KB

    • MD5

      9a437de4ef00f395670628e3baa9df50

    • SHA1

      0f7be408136c02ab30e65f20a86f817543d14f97

    • SHA256

      0622ea76d4ec7989443630c6ea1c60c2236dab91f0e213e779524984cf16a4e8

    • SHA512

      db4f619de8b6990a60a9db8dd9c74aed2a01bf0be79d6ae0d62ae4c24df0bcae31f3b8dd681a141ff12ab1d0bd70f5328989103920486e91855a692d3afc5336

    • SSDEEP

      3072:iR/yGECL2aZwHj2saYDZSpiXL/0swl8scsNLPlVGdQIb3:e/cCL2aZwHXVDZxXL/4l5c8Ryb3

    Score
    10/10
    discoverypersistencespywarestealerupx

    • Modifies WinLogon for persistence

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks