773a273b2c81ea4a0f308de30d377850b309a261a86418f580ec406d8e86f692 | Triage

Resubmissions

08/05/2024, 01:59

240508-cexbqacf91 10

08/05/2024, 01:58

240508-cdzepafc24 8

Sharing

General

Target

followersbot.exe
Size

29.8MB
Sample

240508-cdzepafc24
MD5

1d8e95b4a436b4dd8e00eb84cf225246
SHA1

25f0654c804e56279a2f4e03fd940584a3db082f
SHA256

773a273b2c81ea4a0f308de30d377850b309a261a86418f580ec406d8e86f692
SHA512

43f43002d5e4d56b9902f45814b6b8735b4b62bab4a50199105784ac00f48fca0ae0564cbc1ebac1a5965745ab0a4d3144bb143d6bebd417f972d30e47ace514
SSDEEP

786432:1Q7YWt1MOSmwvIUciBDtfhuLhAzvlWOkzrLC+fA/I/AUbbZCaTAQ:1QJMOS1v7c2fuhoqviI/xbbZCap

Score

8^/10

execution

Malware Config

Targets

- Target
  
  followersbot.exe
- Size
  
  29.8MB
- MD5
  
  1d8e95b4a436b4dd8e00eb84cf225246
- SHA1
  
  25f0654c804e56279a2f4e03fd940584a3db082f
- SHA256
  
  773a273b2c81ea4a0f308de30d377850b309a261a86418f580ec406d8e86f692
- SHA512
  
  43f43002d5e4d56b9902f45814b6b8735b4b62bab4a50199105784ac00f48fca0ae0564cbc1ebac1a5965745ab0a4d3144bb143d6bebd417f972d30e47ace514
- SSDEEP
  
  786432:1Q7YWt1MOSmwvIUciBDtfhuLhAzvlWOkzrLC+fA/I/AUbbZCaTAQ:1QJMOS1v7c2fuhoqviI/xbbZCap
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
  execution
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1