f5ea404bb816d7798240d568971cce39e2e902382002d5db31014dd2d17e8bb7 | Triage

Sharing

General

Target

expressvpn_windows_12.59.0.42_release.exe
Size

72.3MB
Sample

231104-sq6yasbh7x
MD5

60a4063c268d1d4ce0c6ac811cbb2cfb
SHA1

c679257926722270aa483901e0ef29ab367ebff0
SHA256

f5ea404bb816d7798240d568971cce39e2e902382002d5db31014dd2d17e8bb7
SHA512

f55de66a6bb029d594c71b8c8ab7b5eb44ae3dbb08be72ec3e2b34bccb83f3308c087232391b09382c65337c35c40f99a5a9e0969a3f8a936c160d49e2d8e314
SSDEEP

1572864:to5bNk/aYjsMoKJaYd2QebFyM6bIHKOG0PXQAcSlgdtcVTVMjXMEs6Ns+:toxXFm2QEyXHH0Pr3WdtwTqMp6++

Score

4^/10

Malware Config

Targets

- Target
  
  expressvpn_windows_12.59.0.42_release.exe
- Size
  
  72.3MB
- MD5
  
  60a4063c268d1d4ce0c6ac811cbb2cfb
- SHA1
  
  c679257926722270aa483901e0ef29ab367ebff0
- SHA256
  
  f5ea404bb816d7798240d568971cce39e2e902382002d5db31014dd2d17e8bb7
- SHA512
  
  f55de66a6bb029d594c71b8c8ab7b5eb44ae3dbb08be72ec3e2b34bccb83f3308c087232391b09382c65337c35c40f99a5a9e0969a3f8a936c160d49e2d8e314
- SSDEEP
  
  1572864:to5bNk/aYjsMoKJaYd2QebFyM6bIHKOG0PXQAcSlgdtcVTVMjXMEs6Ns+:toxXFm2QEyXHH0Pr3WdtwTqMp6++
Score

4^/10
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1