Overview

overview

8

Static

static

1

Activate.cmd

windows11-21h2-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Activate.cmd

  • Size

    156KB

  • Sample

    240523-b56seahb4y

  • MD5

    7384e2dd276375e071b65aac49861d76

  • SHA1

    cdc5c06a00ec5b530cedcdcb90107b8c07b6d553

  • SHA256

    95f54b0f4add55b7b2e444dab06935ffb18973432425ad7ae522061fb7932ccf

  • SHA512

    3f47fe1772096810349b2b4334aaa74a6de33fb38b4117b1256269e79be4b6382cfb344e4b85d5f5005aa7473a3d0c3effa09ebdc68241d4f72fa8127f8f8820

  • SSDEEP

    1536:KPb6vWkuac+4GWjsisxsGLaNQgEMTV62m0KHzGnFSZVUQG4x0j+E0tNIZleyiGRD:qbguYMTVFpGzGnFSW4xiiIAa

Score
8/10
evasionexecution

Malware Config

Targets

    • Target

      Activate.cmd

    • Size

      156KB

    • MD5

      7384e2dd276375e071b65aac49861d76

    • SHA1

      cdc5c06a00ec5b530cedcdcb90107b8c07b6d553

    • SHA256

      95f54b0f4add55b7b2e444dab06935ffb18973432425ad7ae522061fb7932ccf

    • SHA512

      3f47fe1772096810349b2b4334aaa74a6de33fb38b4117b1256269e79be4b6382cfb344e4b85d5f5005aa7473a3d0c3effa09ebdc68241d4f72fa8127f8f8820

    • SSDEEP

      1536:KPb6vWkuac+4GWjsisxsGLaNQgEMTV62m0KHzGnFSZVUQG4x0j+E0tNIZleyiGRD:qbguYMTVFpGzGnFSW4xiiIAa

    Score
    8/10
    evasionexecution
    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

System Services

1
T1569

Service Execution

1
T1569.002

Persistence

Create or Modify System Process

1
T1543

Windows Service

1
T1543.003

Privilege Escalation

Create or Modify System Process

1
T1543

Windows Service

1
T1543.003

Defense Evasion

Impair Defenses

1
T1562

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Remote System Discovery

1
T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Service Stop

1
T1489

Resource Development

Reconnaissance

Tasks