Overview

overview

7

Static

static

3

Scripted.exe

windows7-x64

7

Scripted.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Scripted.exe

  • Size

    13.7MB

  • Sample

    240526-w6jdqagc95

  • MD5

    14f8fd9f590d178a67d018128368546f

  • SHA1

    c5ed3b9e97a25a68b1138940f8ea18016ed38919

  • SHA256

    cabf23a0705de0fce258d7cd47146ac842d0c12e0992133708dcb2664b413ad3

  • SHA512

    c02e372733f41e574eb13bdf46b8a0d6e368c68cafa94597ce7a3c1512e55dbad1a7c9760494c1bacb3fbbdf897822dcf8f8b9f3673c9def0d25c096a0f6d2eb

  • SSDEEP

    393216:3o9DVuMwxFf5L1V8d+AoEOgs1SDDNWHlbcZRFt3SNCS1axeP6:49pu9RRjEOgsE4bQt3mal

Score
7/10
pyinstallerupx

Malware Config

Targets

    • Target

      Scripted.exe

    • Size

      13.7MB

    • MD5

      14f8fd9f590d178a67d018128368546f

    • SHA1

      c5ed3b9e97a25a68b1138940f8ea18016ed38919

    • SHA256

      cabf23a0705de0fce258d7cd47146ac842d0c12e0992133708dcb2664b413ad3

    • SHA512

      c02e372733f41e574eb13bdf46b8a0d6e368c68cafa94597ce7a3c1512e55dbad1a7c9760494c1bacb3fbbdf897822dcf8f8b9f3673c9def0d25c096a0f6d2eb

    • SSDEEP

      393216:3o9DVuMwxFf5L1V8d+AoEOgs1SDDNWHlbcZRFt3SNCS1axeP6:49pu9RRjEOgsE4bQt3mal

    Score
    7/10
    upx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Resource Development

Reconnaissance

Tasks