General

  • Target

    68b2d98b149d4eb8bee52f7dad010fca5850a21c8e872783b18f2c414dc29320.exe

  • Size

    488KB

  • Sample

    240523-bz66zsgg9x

  • MD5

    6ff047f1181667ebef43b9fe8805f56a

  • SHA1

    bfccf361769e5d0eae62c6b70d289692c0b849e7

  • SHA256

    68b2d98b149d4eb8bee52f7dad010fca5850a21c8e872783b18f2c414dc29320

  • SHA512

    a3e4861ef73655de7aba96101db5ca77ca355977d2b7d519afeb9f33ee6b554e466fbe4db970286ad6d8c3c395684ab8d4c67b6fb5013885a8ceb8d4dd4aea05

  • SSDEEP

    12288:QM2yDfjsHiLaLyV+QzOIiQkkWpHadpdohI:rDYHOlOIiQnWp6dpy

Score
8/10

Malware Config

Targets

    • Target

      68b2d98b149d4eb8bee52f7dad010fca5850a21c8e872783b18f2c414dc29320.exe

    • Size

      488KB

    • MD5

      6ff047f1181667ebef43b9fe8805f56a

    • SHA1

      bfccf361769e5d0eae62c6b70d289692c0b849e7

    • SHA256

      68b2d98b149d4eb8bee52f7dad010fca5850a21c8e872783b18f2c414dc29320

    • SHA512

      a3e4861ef73655de7aba96101db5ca77ca355977d2b7d519afeb9f33ee6b554e466fbe4db970286ad6d8c3c395684ab8d4c67b6fb5013885a8ceb8d4dd4aea05

    • SSDEEP

      12288:QM2yDfjsHiLaLyV+QzOIiQkkWpHadpdohI:rDYHOlOIiQnWp6dpy

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Loads dropped DLL

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      ac0f93b2dec82e9579bff14c8572a6c8

    • SHA1

      6460244317cbb77e342adb3561ec3acb496c84d5

    • SHA256

      3aa8e0abadefea2de58281198acfe48713a1d5b43aea5619f563cea098e9fd34

    • SHA512

      8055a6af150c45547927499f9cbf645d7f39c8e4f9caff4726fd711d2401abca01a79837095e5752b9f57b06446973ea6506796f2223bdb0179243d6e0575bd2

    • SSDEEP

      96:5OBtEB2flLkatAthPZJoi9jpfW/er6cBbcB/NFyVOHd0+u3wEX:5hB2flXAVJtjf6cBbcB/N8Ved0PJ

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks