0f7bf7cd4242649a72713e8b5df8cdf062aea010e2dbe9187e78675951f8183f | Triage

Sharing

General

Target

Add Group Policy Editor to Windows 10 Home with PowerShell.zip
Size

878B
Sample

230420-rndy3aad58
MD5

ec526179c3828c2bb4f31e08e752c42b
SHA1

f3090db7c4932187b99357f429d4244ea2b84bad
SHA256

0f7bf7cd4242649a72713e8b5df8cdf062aea010e2dbe9187e78675951f8183f
SHA512

70b3a879b2696af86aaae7f0959a19bff26f46c91e7ce27e952a657ce95494d8ea11c61a80d085b5a81cc430eafce11abbb1eb2c65f1a585dafdf20d59b15583

Score

7^/10

Malware Config

Targets

- Target
  
  Make a Donatation.html
- Size
  
  153B
- MD5
  
  27fc263dd490d556c90c717604dc5d77
- SHA1
  
  f549c91e997c2c947379dcd69cfbab124b224f09
- SHA256
  
  a8e23c34125f4177edf24b177500521917790ca1e91cd57158e355675599b227
- SHA512
  
  22362d3ba5caa67061cb7f5a1786df697557c2a3b632dedcc65a312367e3c8f847d18b9123fe7181fd471f05dbd5d4dc231add3a18d278f1953760e1eb2d8a19
Score

1^/10
behavioral1 behavioral2
- Target
  
  gpedit-enabler.bat
- Size
  
  598B
- MD5
  
  6386ef9c3241595f93d6286038484bc2
- SHA1
  
  6f35f7793c0204964f800c2a33957c349af54987
- SHA256
  
  2992fcc9d243842f910f5e4ebe1f2d0add9ca3de5892edca0c56ac0c82317d74
- SHA512
  
  35c68b93f72d8a9b7684be2367515e019d284e9ac57cee6b418ad40963446bd38a866485d203d2e27ff05c9b3e5e0f0764f9279d5159e1763d17e7dcb12aaf34
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral3 behavioral4

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4