General

  • Target

    RNS.zip

  • Size

    1KB

  • Sample

    240502-rmh7dsaf5t

  • MD5

    19367930822b548c5a0c8e88b823a480

  • SHA1

    65bf4908621c13b087c253e50731308f0d7a9715

  • SHA256

    9665c9eb46dcd767f8df581d174f4cfabcb9977cb2213ca32a86b5c337327970

  • SHA512

    1adce766416d10de54999bff4d4a23692c50eccc72e350113a0478b5116feb36b6a2c20e71ee157a5176eb09a548867e50831eaad66c3dc1dad2c10065446ca4

Score
8/10

Malware Config

Targets

    • Target

      RNS/RNS.bat

    • Size

      3KB

    • MD5

      e3eafb550debc91f27e26b1e6b14d9c6

    • SHA1

      d87b36f3675fc526d64705b18b1065dc8784263b

    • SHA256

      8546108e6fb07e80f89d9df3baaac7aa844505ed26a7aad0785cc276c27368af

    • SHA512

      62496adc39eb7ff03d2b8fe8a4bdcd545d78afb17162d2695bc85497e8fc2960a31aab1789c8989c0e10209d5198c87f293d1a9e79e975cd5c5738f8761ec6fa

    Score
    1/10
    • Target

      RNS/RNS.html

    • Size

      1KB

    • MD5

      1f4681c778f3800ef838f86541d95514

    • SHA1

      65444635025eef8d01b16d5028baf32256d00381

    • SHA256

      9d5a77111d8f43e350b309b1e52cf331b904ec8f0aa5b2a6b947f422b5e2c1f7

    • SHA512

      0162746e4daebf993c2fdcc7ec3e5ba486466445d28061de34e42c84b7cbca60aa4622692b996287aa4f7da9dd2381d53077514f8ff8e96fb67af778d37114b8

    Score
    8/10
    • Manipulates Digital Signatures

      Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.

    • Modifies Windows Firewall

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks