General

  • Target

    e71554c07825671158b13e8d3e82fe5b590175c0e7830fd508a397d665fd89fe.exe

  • Size

    595KB

  • Sample

    240705-ymst6axana

  • MD5

    3db1d32e9c0c727a50e9348b01b46575

  • SHA1

    9a64e208359ef6449b4d0821f0bc51bd1caa4f13

  • SHA256

    e71554c07825671158b13e8d3e82fe5b590175c0e7830fd508a397d665fd89fe

  • SHA512

    855816384bd56d152127c8d58814bcdee94fe911654f676ba6a2346312e401aa22c9579a80f912cc2de2ec19b252311100d2e3f0fcbd3dedd4d14e7b33b8a053

  • SSDEEP

    12288:1oGrkkwxP6l1C92rT071MJLlk+WtpHo0vHWMAYYYJtia0E7+hF:1oGIDPaCYrToMJLlLWtS5DIJp

Score
8/10

Malware Config

Targets

    • Target

      e71554c07825671158b13e8d3e82fe5b590175c0e7830fd508a397d665fd89fe.exe

    • Size

      595KB

    • MD5

      3db1d32e9c0c727a50e9348b01b46575

    • SHA1

      9a64e208359ef6449b4d0821f0bc51bd1caa4f13

    • SHA256

      e71554c07825671158b13e8d3e82fe5b590175c0e7830fd508a397d665fd89fe

    • SHA512

      855816384bd56d152127c8d58814bcdee94fe911654f676ba6a2346312e401aa22c9579a80f912cc2de2ec19b252311100d2e3f0fcbd3dedd4d14e7b33b8a053

    • SSDEEP

      12288:1oGrkkwxP6l1C92rT071MJLlk+WtpHo0vHWMAYYYJtia0E7+hF:1oGIDPaCYrToMJLlLWtS5DIJp

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Drops file in System32 directory

    • Target

      Dropsically254.Sus

    • Size

      51KB

    • MD5

      edde9e024aca7c05acf5b3d33d22846b

    • SHA1

      f97c556879785f3956d1e8f1f995204265ccec44

    • SHA256

      2583c632eb6f9585bd39250b71a8902aa91ae1f23f2f68cfe468cb057dbc113e

    • SHA512

      272d96b4696fa3b00d95434cc77df31a692a74c89d802145a59344b3c65805f4cc26482ea65fab150d2fb01e077b4cb7fbc643e1b4d934d0150c889b3e99e7ac

    • SSDEEP

      768:dCY9RLI5ZlfuaPrGlOOt6lriYGhFZFN5GoLu0XUdaFwY5FfnGpo7VyMvfqh:drTZaTEt6oh3UijcaFw8PGNMg

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks