Overview

overview

7

Static

static

d3991101f1...5d.vbs

windows7-x64

7

d3991101f1...5d.vbs

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d3991101f12d83a4c779732036144b3cb68ac7cf56c73e555821335fc432225d

  • Size

    11KB

  • Sample

    221123-nxkleshh53

  • MD5

    87957d983abe5f3b63931e098f2aaad7

  • SHA1

    0486ceb4292a87baa4bad1dfef1830aff38d8823

  • SHA256

    d3991101f12d83a4c779732036144b3cb68ac7cf56c73e555821335fc432225d

  • SHA512

    148b34baaabfb46fc4b9c5aefcb2c32ab6a303e040bfd609e31c8125ac6c5d25461598571bd924d803191744370b06349e78811220b97aa00279162d69b0ce7f

  • SSDEEP

    192:lFDmTIrJqFEid8atGglQYhEWDMZSFFOtaCXCgsqpVPrPc6lr5lrOUT9FvyeJ74mN:jxF7iGagRYwZSFFOECXCghDIcUmAg1

Score
7/10
persistence

Malware Config

Targets

    • Target

      d3991101f12d83a4c779732036144b3cb68ac7cf56c73e555821335fc432225d

    • Size

      11KB

    • MD5

      87957d983abe5f3b63931e098f2aaad7

    • SHA1

      0486ceb4292a87baa4bad1dfef1830aff38d8823

    • SHA256

      d3991101f12d83a4c779732036144b3cb68ac7cf56c73e555821335fc432225d

    • SHA512

      148b34baaabfb46fc4b9c5aefcb2c32ab6a303e040bfd609e31c8125ac6c5d25461598571bd924d803191744370b06349e78811220b97aa00279162d69b0ce7f

    • SSDEEP

      192:lFDmTIrJqFEid8atGglQYhEWDMZSFFOtaCXCgsqpVPrPc6lr5lrOUT9FvyeJ74mN:jxF7iGagRYwZSFFOECXCghDIcUmAg1

    Score
    7/10
    persistence

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks