General

  • Target

    oran (2).bat

  • Size

    3KB

  • Sample

    240528-y6yvhsah4x

  • MD5

    751db7140d2911f5bfc65cf03b42252f

  • SHA1

    76ed57e4cf65e4735e916dc7d427f218191559c5

  • SHA256

    f17a109dff8890fa19ea9f4324c49daabf22d4b5c9386a1a819268f04eb9adeb

  • SHA512

    e46d6360e1753a3f809ae40873d5fcde355a1c2a2f2f7f6724bda1e4270ef616df9a00670551592439de5c14c00c94fc2be2e7581f3f391db17cac770eae2090

Score
7/10

Malware Config

Targets

    • Target

      oran (2).bat

    • Size

      3KB

    • MD5

      751db7140d2911f5bfc65cf03b42252f

    • SHA1

      76ed57e4cf65e4735e916dc7d427f218191559c5

    • SHA256

      f17a109dff8890fa19ea9f4324c49daabf22d4b5c9386a1a819268f04eb9adeb

    • SHA512

      e46d6360e1753a3f809ae40873d5fcde355a1c2a2f2f7f6724bda1e4270ef616df9a00670551592439de5c14c00c94fc2be2e7581f3f391db17cac770eae2090

    Score
    7/10
    • Registers COM server for autorun

    • Legitimate hosting services abused for malware hosting/C2

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks