Resubmissions

24-11-2022 04:10

221124-erfkvabe31 7

24-11-2022 03:55

221124-ehay1aff55 7

General

  • Target

    75219979101d8d77ce67d5cc39fd1110135224ceb271efe5db2302cc38df6bb0

  • Size

    143KB

  • Sample

    221124-erfkvabe31

  • MD5

    0cb3ac7cd47ab4deba79940a33ec102c

  • SHA1

    970f1e1a4ee74b5888be4feff5e83d35f1b060a1

  • SHA256

    75219979101d8d77ce67d5cc39fd1110135224ceb271efe5db2302cc38df6bb0

  • SHA512

    534b914537050035f556b9bdaac7207f2e64086a51c41ae52942bccc38e4dd43eaf94f69bc36fd5f6bdad54d632fd098cf5bd313c2ca61788937c954ea44e501

  • SSDEEP

    1536:P1zYivgd088b+ZZawx3NOYdTOghkEuVKuTzZiwX3SCnOqA5tNQ1xY7sjg7HUXQy:P1zQZISiMwzZiwXiCo5nmi7sjg7HUgy

Score
7/10

Malware Config

Targets

    • Target

      75219979101d8d77ce67d5cc39fd1110135224ceb271efe5db2302cc38df6bb0

    • Size

      143KB

    • MD5

      0cb3ac7cd47ab4deba79940a33ec102c

    • SHA1

      970f1e1a4ee74b5888be4feff5e83d35f1b060a1

    • SHA256

      75219979101d8d77ce67d5cc39fd1110135224ceb271efe5db2302cc38df6bb0

    • SHA512

      534b914537050035f556b9bdaac7207f2e64086a51c41ae52942bccc38e4dd43eaf94f69bc36fd5f6bdad54d632fd098cf5bd313c2ca61788937c954ea44e501

    • SSDEEP

      1536:P1zYivgd088b+ZZawx3NOYdTOghkEuVKuTzZiwX3SCnOqA5tNQ1xY7sjg7HUXQy:P1zQZISiMwzZiwXiCo5nmi7sjg7HUgy

    Score
    7/10
    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scripting

1
T1064

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Scripting

1
T1064

Tasks