General

  • Target

    tneVIVI(95961).rar

  • Size

    730B

  • Sample

    230630-dbvjdsgg9z

  • MD5

    9a245daeea61e8c54bac07fcdb64ec02

  • SHA1

    28503420619e57dd3047c202561794f123ac854a

  • SHA256

    a92c403f39b60bc3cab29181272d9fe55ae99ddadf2c0b5b30644a76b65ae8ad

  • SHA512

    0aa35ec4d1dd311b2a4238c93ad0e377fceeb0fe4728e2c1ddaf40c2b7cd4c973ceb5ceda8191512bb9efe0e6600afcb582ddceb8b27013836d91d778a498bf0

Score
8/10

Malware Config

Targets

    • Target

      tneVIVI(95961).cmd

    • Size

      865B

    • MD5

      9468502a5b47860e4a8a67712fa95324

    • SHA1

      df7541379aafc783a35cef1674deaa8ba068bf46

    • SHA256

      5cdd404e277fe00127b8a6e5ca8cc40adfb5456460bf43cec7e94ddb362f03e0

    • SHA512

      6f17e9c13c8eabe55ff55d8f7f76dcc6217ea6d7a4ac129cb57d05690b35ec8df1a6293e35bc0df9615bc7eada0401dde578ab06124cea46f73bc5567339221e

    Score
    8/10
    • Blocklisted process makes network request

    • Drops startup file

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks