44f795e15d82ecbabfb75b46b637ec0cb043ed52e70c3374fd7491d9f4aec7d1 | Triage

Sharing

General

Target

WINBLOCK.txt
Size

237B
Sample

240203-rpbkbsdgfk
MD5

47eb57f351b25eae19fd32210cfa9221
SHA1

ab6f95b8f61f1c605fa6b6f9b140a4ac42fadf67
SHA256

44f795e15d82ecbabfb75b46b637ec0cb043ed52e70c3374fd7491d9f4aec7d1
SHA512

b46f21f68757b2e92ccb8b825f01e680900ad7939df4c43b892c29bb946c5763c47fb78af19bbd0b6fe8a7fb7d839a0efb341a6d87fa52350d7be84c24b6f63a

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  WINBLOCK.txt
- Size
  
  237B
- MD5
  
  47eb57f351b25eae19fd32210cfa9221
- SHA1
  
  ab6f95b8f61f1c605fa6b6f9b140a4ac42fadf67
- SHA256
  
  44f795e15d82ecbabfb75b46b637ec0cb043ed52e70c3374fd7491d9f4aec7d1
- SHA512
  
  b46f21f68757b2e92ccb8b825f01e680900ad7939df4c43b892c29bb946c5763c47fb78af19bbd0b6fe8a7fb7d839a0efb341a6d87fa52350d7be84c24b6f63a
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1