567ce0e975c3180968b5ce5e2a6fcd29c401afa1e92dc4c9e7075851db58174e | Triage

Sharing

General

Target

Tu factura.vbs
Size

602B
Sample

200214-4qkbwl4kzs
MD5

5f84748a26c8cbe1e1dad12b26c74fe7
SHA1

622242f4cca388505950eb2ab67c0a14e11a31a6
SHA256

567ce0e975c3180968b5ce5e2a6fcd29c401afa1e92dc4c9e7075851db58174e
SHA512

ea4fca20843e4334766df1d15de2114397b08e11a7120edb9a4f0f34bdad4c9cbecc339a7407d802180b0d69805b84b6792418ec941377906f68f56e49b703b9

Score

8^/10

evasion spyware trojan

Malware Config

Targets

- Target
  
  Tu factura.vbs
- Size
  
  602B
- MD5
  
  5f84748a26c8cbe1e1dad12b26c74fe7
- SHA1
  
  622242f4cca388505950eb2ab67c0a14e11a31a6
- SHA256
  
  567ce0e975c3180968b5ce5e2a6fcd29c401afa1e92dc4c9e7075851db58174e
- SHA512
  
  ea4fca20843e4334766df1d15de2114397b08e11a7120edb9a4f0f34bdad4c9cbecc339a7407d802180b0d69805b84b6792418ec941377906f68f56e49b703b9
Score

8^/10

evasion spyware trojan
- Blacklisted process makes network request
- Modifies system certificate store
  evasion spyware trojan
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

evasionspywaretrojan

behavioral2