148ce8730207f9f7f82c54eab0806ea229038f3e8deded31929b5510460f7d61

Sharing

Copy URL

Twitter E-mail

General

Target

Battly.Launcher-Windows.exe
Size

183.1MB
Sample

240521-x3x85sfh5t
MD5

642318f617cbf259e9e90c19762b8f0e
SHA1

8effbc82daaac30c8d28498294d2629129c410e1
SHA256

148ce8730207f9f7f82c54eab0806ea229038f3e8deded31929b5510460f7d61
SHA512

b8916dd5241c88f49bf8faad4c99059062a0854ec2ded8dedd38bb99f2ba2b8f1d63670da83c5f619d31e2b0c2458fa59ff4c7f556aa4d9ab07edb0f0e7b2778
SSDEEP

3145728:aJcuNt6i+X0MdTUPo+YFawtU4odz5zA436E7IkGl0BkChNw5+VTmms+B6Q87:icuN7+QYFjmPz5zAJ0wahNw5+VTTs+BA

Score

7^/10

execution

Malware Config

Targets

- Target
  
  Battly.Launcher-Windows.exe
- Size
  
  183.1MB
- MD5
  
  642318f617cbf259e9e90c19762b8f0e
- SHA1
  
  8effbc82daaac30c8d28498294d2629129c410e1
- SHA256
  
  148ce8730207f9f7f82c54eab0806ea229038f3e8deded31929b5510460f7d61
- SHA512
  
  b8916dd5241c88f49bf8faad4c99059062a0854ec2ded8dedd38bb99f2ba2b8f1d63670da83c5f619d31e2b0c2458fa59ff4c7f556aa4d9ab07edb0f0e7b2778
- SSDEEP
  
  3145728:aJcuNt6i+X0MdTUPo+YFawtU4odz5zA436E7IkGl0BkChNw5+VTmms+B6Q87:icuN7+QYFjmPz5zAJ0wahNw5+VTTs+BA
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1
- Target
  
  resources/app/node_modules/adm-zip/adm-zip.js
- Size
  
  30KB
- MD5
  
  9b6da3cd4a4ce0963e80d0e6dc1a11f1
- SHA1
  
  fce6550c2231f60425661f2f7db99efff491cdff
- SHA256
  
  cb49867d6ffe8e7c08ad0e6466c86450b0f81910069ed1ad9d5b7b9c27367929
- SHA512
  
  38f325ced4315f7fd39f9ec885e1a35f8d5c49bfe9721c3ae0b54d040c76e7df3e6d557f76bb5783594b0fe5c15f9e73f8c7a21fee373ecbd97ed9220d3127ba
- SSDEEP
  
  384:T4XzvHf944AOOLlPHWuFz5AjHxLPVzVbAB1kfVeHW3W5SqdCLFWYi82et/2Ktvbe:UzvF4DPHzFn11IqdCpoFaU
Score

3^/10

execution
behavioral2
- Target
  
  resources/app/node_modules/adm-zip/headers/entryHeader.js
- Size
  
  11KB
- MD5
  
  db0294dd88cf4922e3cbb5e45d087287
- SHA1
  
  f46ea2a1a7e9cb0c6c25fc436743b78d95da1841
- SHA256
  
  d3ca0adfd642be6287daf5a7cc8d3959332f31ba52b6ef1a53e4520bf4175f3f
- SHA512
  
  2f77a248db215a4d7287dfe7227adc1bbd4239d31731a743994dd4a4e4f0aa061dacb3fc9d79f22364d3771ac3b36d41dca5788b34892c94f8cb8d2d95a6b661
- SSDEEP
  
  192:ybVz3fxOy27Ad1mMcyfPrzq638jfhDq5YoYfXSlAHhDQf:y5fxOv7VMcyfPXqm8jfhD+
Score

3^/10

execution
behavioral3
- Target
  
  resources/app/node_modules/adm-zip/headers/index.js
- Size
  
  94B
- MD5
  
  64bc889b89f1c8a04a698a8f74e24e5b
- SHA1
  
  68781da04cf1ebc4f03434ea5b2b65f10cca07e6
- SHA256
  
  536e4b5bf009a3d9f6eccfbbc4157cb6de663d889e0826ea5f6e5fa17aaeb8bf
- SHA512
  
  9eb207fa61862aebd9cc5a89f85757313c7f163ea0f5a15c16250f79845b9caa1d8109bc3e634a9ed3fb0616c71aed3005ace48eff0941518c778c3063613975
Score

3^/10

execution
behavioral4
- Target
  
  resources/app/node_modules/adm-zip/headers/mainHeader.js
- Size
  
  4KB
- MD5
  
  1d35f59aece6922da87e6183e7f8379b
- SHA1
  
  b772c6b2285d6f7c099bfd7ace005e730bd12c78
- SHA256
  
  3269b558fd8990df8ae1f500268e0512854c04bffefcaa0e584360de1809b84a
- SHA512
  
  3cb59c8fb586a89936ad4fbd4d29c54cfe8e0ae9abcc4ff70ef03a3cdbefff9b4a5d91658da79e6746ab01af9cfc57dd908b8e478ee4aee5848e0252a1f68603
- SSDEEP
  
  96:riWDe6p2ciGztwfWH7gNJzaI2mhUJfPok1:rFDe6pPyEp1
Score

3^/10

execution
behavioral5
- Target
  
  resources/app/node_modules/adm-zip/methods/deflater.js
- Size
  
  1021B
- MD5
  
  41fd6791497f7d74ee56a7753e08da66
- SHA1
  
  bd62d07bfe703da89172fcfeaa8848d6ba5c68b4
- SHA256
  
  6dc41b2460594cfa5136b797653c166b2f7403820a40f2fca17cca35a5de1b5f
- SHA512
  
  5f16aeb477321470986a8c9807ebf3b75e979e5fb34156028ef56f44f38c4f4d72d9d086784e9dfedeffa61f91f973b6ac7e7ba1730eebd86bb549de2dbb4761
Score

3^/10

execution
behavioral6
- Target
  
  resources/app/node_modules/adm-zip/methods/index.js
- Size
  
  128B
- MD5
  
  74d54dda1e050cad9b31da325f92fb01
- SHA1
  
  683b0412f3bdb3ae54cd809e37f456dade4d046a
- SHA256
  
  d67714f1a04be942f90be77069af3ff4214aa8ee84b26edeff3a87eb0d8e2dc0
- SHA512
  
  88ff974e69207c427ce1c9161489a275c4328ba392da65b268614fd5c66ef9feb10dafe1464dcc5873221de61bdb045dcf47092760c973ec06825158978df3e6
Score

3^/10

execution
behavioral7
- Target
  
  resources/app/node_modules/adm-zip/methods/inflater.js
- Size
  
  936B
- MD5
  
  ddf58fccf9d270a32d6fe17fe86a26f9
- SHA1
  
  c720d51c923aa71bce2a27a3d081af09de0e2a67
- SHA256
  
  ac2c664bd94fe9daee76174aa00d149d60bbbe6ae5d5865b14bd76e9b7d2d612
- SHA512
  
  bc5914af2950f7e87b0071d54f885b7ef494cee1f036e9fe2e31365506ab78a6327dd25d2c565c09b0ecd465ddc79bb8fc5ff7b6c3a9b15a4d4f044fe816d610
Score

3^/10

execution
behavioral8
- Target
  
  resources/app/node_modules/adm-zip/methods/zipcrypto.js
- Size
  
  5KB
- MD5
  
  84d22177957b42a5f8cef39e729bcaef
- SHA1
  
  6a6dea4aab4c6c8b1b4b19a246f01b03cb114711
- SHA256
  
  2b76c14cac47da833e1bdf690faf68acc0f5ceb645605df876f42e67801d2f1c
- SHA512
  
  a94de7eb1aac18bba8854041a8d9a2f035dacc338e007462d891c6557f68c7a6d179d82078f0bddc047e29766f961e7c83c5a278a08e8b3b72917f61625320e0
- SSDEEP
  
  96:kRFxIiQ1K80cAAbZPxijV/7jRcDG2+2Ihpq68rMyA+GBBEF/yJ/rshl2kJGWvLoC:kOiQ1fUAbZ0jxdz2+thJ8FoDJ/g+K1EC
Score

3^/10

execution
behavioral9
- Target
  
  resources/app/node_modules/adm-zip/util/constants.js
- Size
  
  6KB
- MD5
  
  9557c90a448baec12cf2cb2f97e2c5a2
- SHA1
  
  19ece17c4aed05723601ec510ad2020fb462cf52
- SHA256
  
  208e943a2e5faad056047f3c7991cce3cde637d8e272a564f2546210ebdf2069
- SHA512
  
  433a683e049a8d2fa321e9cf6932c2f5075c83f1713a9d0514956310174ef2959d0c8378a039d27d0a34f321262f6cf7eee40066ca54da1b57c5483b6d00f089
- SSDEEP
  
  96:Dtbl0W6xP0XM0gly+ESo5Etdt0f2cnHBE8WdQx8Z5h+IrrOnQTUlZmsA:DxyWCsXM06I/uSjG8WdQx8Z5h7rrO72
Score

3^/10

execution
behavioral10
- Target
  
  resources/app/node_modules/adm-zip/util/errors.js
- Size
  
  1KB
- MD5
  
  ac3d2bb07fc89b31183b6786ce467fb3
- SHA1
  
  61964b0caf0c374fb311fbc914e7adfee6911f0f
- SHA256
  
  56ee85e2b90ec4a41df0813c4e7e08f617da69a82663149a8f9cc110deff43ea
- SHA512
  
  1ae94c25cc424f1a4ba7cbe7b08d9809022ac96d4f7ea0f98b10cf4e3bec913793957da17bb811c41153724d0da4f7f8c2850b0140fc4ba74ed553fc25695cd0
Score

3^/10

execution
behavioral11
- Target
  
  resources/app/node_modules/adm-zip/util/fattr.js
- Size
  
  1KB
- MD5
  
  943088ca25b0e25de119778524c8d91c
- SHA1
  
  6cbf8576406db664ea30c0ce8085cc590a248202
- SHA256
  
  cecf4e89cd49c408dacf19894756926cb73bae801f4f44e66011826230ef1975
- SHA512
  
  9892ad5a63788aa2e2a50927990caf7371b3432cf0a7633d6dba3d6f861d1e59eb8a43f6b5ad7127c16cdf153ad0aef1f9163d2c59af9058f427cb55c70662b0
Score

3^/10

execution
behavioral12
- Target
  
  resources/app/node_modules/adm-zip/util/fileSystem.js
- Size
  
  353B
- MD5
  
  85d7973afdda48fd2333b486d4b4afaf
- SHA1
  
  dd0ab76f06f12996cdb07bc8613d7f56aed7f0ac
- SHA256
  
  c0e0fdf6ca6d8dd98041adc6d8674f6bb02b94145abc98f08f24f1d0e4a8b5ad
- SHA512
  
  ea038e326f763da409672e4e1d87170220aa8c1fab1144a3d5f62d1a5db44f2be2c456a08ca4d1c3f776f9c5020e9573b6b146a28a74c329dd51daa961d6cbfe
Score

3^/10

execution
behavioral13
- Target
  
  resources/app/node_modules/adm-zip/util/index.js
- Size
  
  179B
- MD5
  
  6eadaab125a2caf89f2e762259d16df4
- SHA1
  
  680d2665f43dd5074b5eb34d7a22f337d39659dc
- SHA256
  
  a231e422e9f88464dbaf2ca91c0b7acd141f84e475de7847538d3f53890fd274
- SHA512
  
  feb0b65be5cf28c68fcd414a4ba0d659e9298a3a029c1ddef0b5f0d4ac77a355ddb6592aa9c3808b6f40266232c244456a28d49f24700941c6505adc81086eb8
Score

3^/10

execution
behavioral14
- Target
  
  resources/app/node_modules/adm-zip/util/utils.js
- Size
  
  7KB
- MD5
  
  b7a147df232c33b9733089d358e8919f
- SHA1
  
  62f476f4fd0f58d0f6affedadc39da4eed9622e0
- SHA256
  
  476362e756eeab1eb18548732f27ed8786cea36d6c33aa27d75a74fb70b4a2e0
- SHA512
  
  e0c2641d2b2626c145fd829d48c2154431179011946898714aca55be10209c816649ae79cf0fdadf76933079c28114b2c9000ebcd557a5e324448561cbd62b72
- SSDEEP
  
  192:giQAJ3zMRGhO3l3a2iCjgqiuA7cHBrQrlMh6n2d+MYKI6j8Ok86+IEiQkGyTh9d:bz2wSqrl7kZIlj23Yak87Ih7Thn
Score

3^/10

execution
behavioral15
- Target
  
  resources/app/node_modules/adm-zip/zipEntry.js
- Size
  
  11KB
- MD5
  
  c553c1da54ed2015dea9f514d4dfbd42
- SHA1
  
  fc47ac41e724cac3f6deab99730276fb7e4b76a0
- SHA256
  
  699358b454fd68983c363f2df22ada2fac0ad3ebfc4890f80efe7e49461f8c78
- SHA512
  
  808c6912f5dcd11afe4f130dbadc28911fa5402eb60cf2e2df66fd82c80a74772a9527cb731d4b16ea67abf6255e8f5a28e81955bfc78af90f5e6df98cce8dd4
- SSDEEP
  
  192:SCNPhBeY942jhUHaD8QIyrjHqgshbokySgyuqyDYyyyn32S2WsYlr98bvxrgLxOB:SKBeMJjXQQdq9EYUfp2SpsGr9WNgtI
Score

3^/10

execution
behavioral16
- Target
  
  resources/app/node_modules/adm-zip/zipFile.js
- Size
  
  13KB
- MD5
  
  e6dca10b65f08b4623cd2c5f186e85a4
- SHA1
  
  cec0a45acdf6d9688db89be2dba81fa85761d29f
- SHA256
  
  015cb9553db23bc281ee784f7eb974cbd026dace0322a0989b0a400bbcd68e8c
- SHA512
  
  aa0a7f6e81ba719f9e25796453ec72d62a9894d3dcdef860ee6d22a282bb351ee19439c5f7bb2a747bd1d7187fd467a1a721409f38e064885fe9f9717ad8d604
- SSDEEP
  
  192:OsWm/ZVXhCztlExKoOlvJ+6nV/VfZNybEwmLuYiKRw73V7zdqDeZmgm4yDfmUFEa:OYxyPExpu+yfrFtieeQDVmhEP
Score

3^/10

execution
behavioral17
- Target
  
  resources/app/node_modules/ansi-styles/index.js
- Size
  
  4KB
- MD5
  
  9d4acb14d5449b232b22bfe40453b00c
- SHA1
  
  5f96df8b074e4854c03db87ef309eb6c741f4618
- SHA256
  
  d3f197d370760ddd8753c1355b4bdb585a787f1baa92bb8ed217f170c138b594
- SHA512
  
  34ddb9208914ac53ed7c0e7162f74d0313a8f348f34db824414028313c03de674995ac98bbf856f5219d44d1af1455fa41678eb14dbc4639567b9227ef11ca31
- SSDEEP
  
  96:gojeeng/nq55QwQIiZz5x36AYWND6brk1k+c6hj+pz/1nd3VOaGcAGTAG2sqPIdi:Weg/q5NQIiZ91dNWbr8k+c6qnRVOaMlR
Score

3^/10

execution
behavioral18
- Target
  
  resources/app/node_modules/async/all.js
- Size
  
  3KB
- MD5
  
  6c9c5e791341f1eca157c9b71fc8136d
- SHA1
  
  271034a9847242ea97482fc963fd35892a9fd6c8
- SHA256
  
  ece0cc0d74146d57247415a3b4adcaa6fd807150489d60eeb6bfbfb656469b2c
- SHA512
  
  deb87d1e92d4d0cf40797d2313863e4541248daccdd71126f33a9c0d564858a724cb55f2d9d3b0ddee7fd7ecdf2d118b23daea13a749fa03bc17c30f502f412f
Score

3^/10

execution
behavioral19
- Target
  
  resources/app/node_modules/async/allLimit.js
- Size
  
  1KB
- MD5
  
  a609703c2671aae5ddf2d83dd6ad453c
- SHA1
  
  e45f016e6ad89d52fb790c1d02f326c8916d33c0
- SHA256
  
  98a3b10fe47ff3c6badee2bff517542fd191af1b9eb2026663e1be5290053e07
- SHA512
  
  f7ca50a989c0dd5dd99f35e9ed0cb09bff42bcdcc17c1c62087b87b1655d3b20377aaba44565cd835d616af3234cc99b0c597ec02459e4dc684d4e33cb88a62b
Score

3^/10

execution
behavioral20
- Target
  
  resources/app/node_modules/async/allSeries.js
- Size
  
  1KB
- MD5
  
  083c43efcca1e589556ffe47875b2d0a
- SHA1
  
  67be41dd4412f9c6098bb6b6cd8f02ee45a4a092
- SHA256
  
  220c55b8ff121b0be9407af3bfc9df6d663b45d9ddef78bffa2314ad5c623de6
- SHA512
  
  3cfd82af8047fd6b9908aff7a68d0c5856d7c691806dfb8d2adc0873f1b327f296c5c1b7fcf99a320f1cf4d4abc5f5639a7055fb7e927f8afe47fa45fa70815d
Score

3^/10

execution
behavioral21
- Target
  
  resources/app/node_modules/async/any.js
- Size
  
  3KB
- MD5
  
  dd1d46dcf0067e976fb81c43cd677448
- SHA1
  
  445ea3bfd270ba215429840f5231c1b4424befa1
- SHA256
  
  7700408ab16a80d509d14c0de299547fef3877915232c6af2c4a5c106f148c38
- SHA512
  
  8e7a13c13594aed306d966d7c8ce7238f7529f14a55db67b01fae3fd6e39bd4f2b6140ab136bf248c3e57e9caeda439f82e7f8bba2ba59e657f8404bcfe0f5da
Score

3^/10

execution
behavioral22
- Target
  
  resources/app/node_modules/async/anyLimit.js
- Size
  
  1KB
- MD5
  
  4882ebfed6d40d01b563bacc413f8764
- SHA1
  
  1992217ac8a3ceddab3347d165a79f987f46c1e6
- SHA256
  
  e8cf3c5eac466034ee0e2aeb4db77650b5c653889e95f471df548a789747cc5e
- SHA512
  
  3b13de88030267e2abbed40c5a377d6d1e3403648550db4987e4f3f5705ce447dc94c403eca7f8dd3d58fd562d17a8d529fd7ff8f2504ebd206d4c1cd77d5e5c
Score

3^/10

execution
behavioral23
- Target
  
  resources/app/node_modules/async/anySeries.js
- Size
  
  1KB
- MD5
  
  95d30db94de4aa6d1d9da3fcad4072f3
- SHA1
  
  cf521d2a2ffb90462f58e6d0a71d09c17b29b667
- SHA256
  
  0f52489058f5c9f0ec97cd11c042d50cf53aa949880d7beca337f47df1edc4c7
- SHA512
  
  5d89ebf77d0eccd83a2938714d995ddee0cfed3be08c8a2b6419956e897e2180d3db0ad52b64a67505f0439bf2f2348b657d9e9daf9f8977c68e7d1c69cd82e4
Score

3^/10

execution
behavioral24
- Target
  
  resources/app/node_modules/async/reduce.js
- Size
  
  4KB
- MD5
  
  724bb52915e1158b4dff6f26ef4baf72
- SHA1
  
  ad0aa6a0ac5576433051167524923e6aa794c96a
- SHA256
  
  f1e4594194164d2504946c85c8e983346b25f9be8239178defec27e912b56c21
- SHA512
  
  657c3dec82c5c6c34accdbc9d96e2be59a592e60241960810f10a662f5305c21dcef8cf006fcdefb0d48d30ccdd30d9dd6c263c089a88591f18a83a2f390eaaa
- SSDEEP
  
  96:y6Kcr3mvLCw7I20odkC2z2yS4NBsBMV30scZ2OFbnkhdQ70M:y6KcOLfdkC2zpNBsBI3zo2skhK70M
Score

3^/10

execution
behavioral25
- Target
  
  resources/app/node_modules/async/reduceRight.js
- Size
  
  1KB
- MD5
  
  e36ee4d4e33d0a23862c360842105b44
- SHA1
  
  84e0166688b5fd278ad22a724f088bb947b75c07
- SHA256
  
  208fc2365801877db94f1a64ea205783809a8852786e9e638898f26d6cb23c89
- SHA512
  
  b0c7b73c3321b49ad37db3d8a323ab82c98b7adc820c83c3c015a83a305c99463473840689cd898c8a88bdfde293298096f71ac83eac42373abab2dcbf161619
Score

3^/10

execution
behavioral26
- Target
  
  resources/app/node_modules/async/reflect.js
- Size
  
  2KB
- MD5
  
  250df19e4944b1e1289ce6c312962826
- SHA1
  
  8811c06d02fb70392f02f89ace526736a6c37ae9
- SHA256
  
  8768cd08c4a162c46ebd6baf95fe450c3755096dd9bf2a2c60aed82cba25a1cf
- SHA512
  
  27d78c1798ce96cb73bd67650bfc7abdf4f978b75b31e6c39e8057a1a731cb33d70cff5936528ce69832173cfed2e42a451d001b8a0b3b4dc2bc3590a0baf5bc
Score

3^/10

execution
behavioral27
- Target
  
  resources/app/node_modules/async/reflectAll.js
- Size
  
  2KB
- MD5
  
  4fffc0f082f132c267b936ae6cb2ca3b
- SHA1
  
  eb08020b2a58c11f21748cb4481a0916cd5a7fac
- SHA256
  
  4d43aeabf089d7c98479bc29b29c9b557e281acb8c6e01b32d6c78ec1e15f1b7
- SHA512
  
  f9ace6c2c8757b4c70c82d2a345546c89db95fc0c5f69766078cd2df2c72f4472945861393c81b0bdf3a3533673cc21097a106abcf43bcddad48e31a6a529fb1
Score

3^/10

execution
behavioral28
- Target
  
  resources/app/node_modules/async/reject.js
- Size
  
  2KB
- MD5
  
  b8f43e0673e6162e5adf5dd59d6319d8
- SHA1
  
  241ba6008e432a8744aa0b429d77a22ad677decd
- SHA256
  
  9ba2b7c360fc5feb1042eff789da432a4612b9489e83de29caabf300236a99b9
- SHA512
  
  8f5c574138ac9b6f7910eb5a322c4633dc53a1e935266b3d7414d83a81726497c6d5e4b8ad7f662a79ee48db90ebc889a935944b6769cc16bd7e4b304c824ace
Score

3^/10

execution
behavioral29
- Target
  
  resources/app/node_modules/async/rejectLimit.js
- Size
  
  1KB
- MD5
  
  8349a228f314a4f9e2d3d2a8e24c5d41
- SHA1
  
  da12508f737db9d9c0755c33aa879c9025ddd710
- SHA256
  
  8c787ca4a475033406fda243c8de26a98abd8793fa222c3d3ca465a0b2a5eeac
- SHA512
  
  3166e0429d58ca972e94b74b844457b9d6cfcf3aa4d2c744635796515d07d885c306ebc896a4e23cc84744deeec9445a49aa408a93aed7381be464814c1563b9
Score

3^/10

execution
behavioral30
- Target
  
  resources/app/node_modules/async/rejectSeries.js
- Size
  
  1KB
- MD5
  
  4366880b8f948d8881caf9a71b3ad734
- SHA1
  
  bd11b7a45cef4378970e0386eb614d63dcae6374
- SHA256
  
  aa6daba31038ca0ecd3aeb170b3332a822420bf54299e4c4b67a13007920c838
- SHA512
  
  4c8d49aa3b73c0f1428a0304be63e5f18ae1d5f7929a46e3c47263211c2bce7e465106fcd57644a8be90cb1fd86838b686f879ce304a61310755ba3a87964653
Score

3^/10

execution
behavioral31
- Target
  
  resources/app/node_modules/async/retry.js
- Size
  
  5KB
- MD5
  
  6f48e98ca0ea2a166ae7e0e8c03f7708
- SHA1
  
  2c6e3f3af14e49722511171292ce372faf593500
- SHA256
  
  186654a2ff0a12804d91e51d14603dbd6a89340292a4e6a4a41267f641b35526
- SHA512
  
  5915fe2fbc1af10d149681aa74bec95c1e1760fa7448e8aa48b440f838483626a7dbff9c4a30278a65e226e635249b47b76a2d35d7ca7be95ceb5b408dca24ad
- SSDEEP
  
  96:y6B/UHcGWRHDKH6z1GC67GKZajxK0+TId6BkiDcxr9RAjHbcMsKLRbyxpPM:y6lU8dh6ax63o9rObcMsgmM
Score

3^/10

execution
behavioral32

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v13

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32