Overview

overview

10

Static

static

1

zV81jInZ.html

windows7-x64

1

zV81jInZ.html

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    zV81jInZ

  • Size

    60KB

  • Sample

    240601-shk1vsfc3w

  • MD5

    a8d250141052915f5e69199cdd010e80

  • SHA1

    45fbc33443c5e1d5dbdc0b6a7896d64393f6d563

  • SHA256

    82462ca587b06fa9e89fffece64fe7b3b57684124b12a70769912cfac69f3a73

  • SHA512

    59d465c254b88ff47b66a6dac47ec9618c2500158b65496118507f3450bf54286280c1453fa5687ada9d31004c414f0c3caa3e00c6d62087c52628285e2d1587

  • SSDEEP

    1536:dZkIXYyT9WFKlHjzKQw6eYeseKeIePEeteM5R:3UKRjeQO

Score
10/10
execution

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
exe.dropper

https://cold1.gofile.io/download/web/726645fc-70bb-4c7a-8d34-a8b9abce4b1a/SWRevampedBootstrapper.exe

Targets

    • Target

      zV81jInZ

    • Size

      60KB

    • MD5

      a8d250141052915f5e69199cdd010e80

    • SHA1

      45fbc33443c5e1d5dbdc0b6a7896d64393f6d563

    • SHA256

      82462ca587b06fa9e89fffece64fe7b3b57684124b12a70769912cfac69f3a73

    • SHA512

      59d465c254b88ff47b66a6dac47ec9618c2500158b65496118507f3450bf54286280c1453fa5687ada9d31004c414f0c3caa3e00c6d62087c52628285e2d1587

    • SSDEEP

      1536:dZkIXYyT9WFKlHjzKQw6eYeseKeIePEeteM5R:3UKRjeQO

    Score
    10/10
    execution

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks