Overview

overview

8

Static

static

1

spoofer.bat

windows7-x64

spoofer.bat

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    spoofer.bat

  • Size

    26KB

  • Sample

    240112-klv18sdeh3

  • MD5

    71f3e121ed4c4edd93ed7e2eef18c60f

  • SHA1

    c2c10acae7ffe7c0d5ded9fe7603b0804dd743db

  • SHA256

    4b3c02fa1516c71b44708adee293fc0dff5a33fb989c1df8d26603ba3fcf0445

  • SHA512

    b2cf5ed127a15851264e75791d8f44c2fad28a03fa85c628fda08634f6c05f165e145f3615f509e3f84a59c173a2fffdfd6790d57484fa5f73f3fad27a9e3d8c

  • SSDEEP

    768:fBd3qX+ac4zOhpYBUtrwrhtAUIsTpt75qn:/4O

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      spoofer.bat

    • Size

      26KB

    • MD5

      71f3e121ed4c4edd93ed7e2eef18c60f

    • SHA1

      c2c10acae7ffe7c0d5ded9fe7603b0804dd743db

    • SHA256

      4b3c02fa1516c71b44708adee293fc0dff5a33fb989c1df8d26603ba3fcf0445

    • SHA512

      b2cf5ed127a15851264e75791d8f44c2fad28a03fa85c628fda08634f6c05f165e145f3615f509e3f84a59c173a2fffdfd6790d57484fa5f73f3fad27a9e3d8c

    • SSDEEP

      768:fBd3qX+ac4zOhpYBUtrwrhtAUIsTpt75qn:/4O

    Score
    8/10
    evasionpersistence

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks