Overview

overview

3

Static

static

1

Autoit3.exe

windows10-2004-x64

3

ymehvz.au3

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Autoit3.exe.7z

  • Size

    447KB

  • Sample

    231010-taf8dagc99

  • MD5

    e4b31004454be462c97c0bd6ad794061

  • SHA1

    05f316654bc36398d38e0f06ca9eadb22697dfa8

  • SHA256

    071606576abbd250bb5b241ac6989d65eb87f1b3955ab180dcf8a4ce642af73f

  • SHA512

    31f2135caede5322fc7025780a223418c5c51e8d3ca20a45c135b005844697dfb11ba1e09e34d2503045fa827b5dda7b2d16e4120736a93d7af3e47e63f635df

  • SSDEEP

    12288:CSgctnmzRF3enouzjen3FhswCg3M1SWzfgqKD3X9VAGsJouq+L9r:CSg6nmzRF3utynzCZkfqYLAGAjBr

Score
3/10

Malware Config

Targets

    • Target

      Autoit3.exe

    • Size

      872KB

    • MD5

      c56b5f0201a3b3de53e561fe76912bfd

    • SHA1

      2a4062e10a5de813f5688221dbeb3f3ff33eb417

    • SHA256

      237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

    • SHA512

      195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

    • SSDEEP

      12288:6pVWeOV7GtINsegA/hMyyzlcqikvAfcN9b2MyZa31twoPTdFxgawV2M01:6T3E53Myyzl0hMf1tr7Caw8M01

    Score
    3/10
    behavioral1

    • Target

      ymehvz.au3

    • Size

      102KB

    • MD5

      151711041ee1619088258f05a5d3bd5b

    • SHA1

      d2047aaf530ce0db076ea7cc7e548fd5a35cee55

    • SHA256

      ead5d943a69f2d8641612415c77ad26daa6d53e1c6ea0270a91d3121eafd943d

    • SHA512

      1085c381dc8f97353bed29e96a10a2e8ba4a6df761c2af56f9cced5cc6b49c80c388e280a2d53b09e20b4e19f1bdcc813d687d52f7f31679f6ee1c84c23037a1

    • SSDEEP

      1536:r2ur2+jAWjT69uDQcqaJsggAcqbTkhXNZmad52MAONXxrZGJqT6kOjZ9X36:6uqWf98cqpAFPoFFAexcgNY9H6

    Score
    3/10
    behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

4
T1082

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks