Overview

overview

10

Static

static

7

Executable...ce.url

windows10-2004-x64

1

Executable...rd.url

windows10-2004-x64

1

Executable...on.url

windows10-2004-x64

1

Executable...um.url

windows10-2004-x64

1

Executable...ub.url

windows10-2004-x64

1

Executable...te.url

windows10-2004-x64

1

Executable...e).url

windows10-2004-x64

1

Executable...ub.url

windows10-2004-x64

1

Executable...er.cmd

windows10-2004-x64

10

Executable...TI.cmd

windows10-2004-x64

1

Executable...vc.cmd

windows10-2004-x64

10

Executable...ev.cmd

windows10-2004-x64

10

Executable...er.exe

windows10-2004-x64

3

Executable...ce.exe

windows10-2004-x64

7

Executable...P1.cmd

windows10-2004-x64

1

Executable...P2.cmd

windows10-2004-x64

1

Executable...RS.cmd

windows10-2004-x64

1

Executable...OP.cmd

windows10-2004-x64

1

Executable...NP.ps1

windows10-2004-x64

1

Executables/EDGE.cmd

windows10-2004-x64

1

Executable...ZE.cmd

windows10-2004-x64

6

Executable...PT.ps1

windows10-2004-x64

1

Executables/ONED.cmd

windows10-2004-x64

1

Executables/PFP.cmd

windows10-2004-x64

1

Executables/POWER.cmd

windows10-2004-x64

1

Executable...NU.cmd

windows10-2004-x64

4

Executable...TH.cmd

windows10-2004-x64

1

Executable...ER.cmd

windows10-2004-x64

4

Executable...00.png

windows10-2004-x64

3

Executable...rk.png

windows10-2004-x64

3

Executable...ht.png

windows10-2004-x64

3

playbook.xml

windows10-2004-x64

1

Resubmissions

25-04-2023 20:18

230425-y3j7yscg23 10

Analysis

  • max time kernel
    477s
  • max time network
    480s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-04-2023 20:18

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Executables/AtlasModules/Scripts/RunAsTI.cmd

  • Size

    7KB

  • MD5

    58d3e9a4570d66eb9fcbabf715fa75c1

  • SHA1

    7981f41f7db56448c803db11856c3c771cb0cf27

  • SHA256

    b2b1ddb8430533f2a87aa40a4e7d79df76d2b9cf146bfa9652f91d266d7ba690

  • SHA512

    a5c3ead2bf4883f6eeea268ea73f2907ed5840d69f78d8c74f2695b5ed293290c3ecb7942b3d3bab265a5cd9ca3b31615a0976bd08f0d6f1338dfc5dc03ad767

  • SSDEEP

    192:1tYHOTnAJxIX3MJwKb7kJkZL0+qxsD9xG6l7AboMlkObV:1tiOTnf3cxvJCxCRKboMlR

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Executables\AtlasModules\Scripts\RunAsTI.cmd"
    1⤵
      PID:5112

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads