2fcedcfbaeec9b017a9766d03393371c0945dcb3411fb1bcbd28b7ede135187e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WizClient.exe
Size

399KB
Sample

240708-atwydstdqj
MD5

63725d4c11dd0ab8c2313e234ac130f1
SHA1

3824b51f49a4529ec87c0b0513874db1ddb32a3b
SHA256

2fcedcfbaeec9b017a9766d03393371c0945dcb3411fb1bcbd28b7ede135187e
SHA512

1dbae2f346f22b18d5bcfb96b8423c24fbbc847655a236331adbbf9008776596e38d6c8937b2ab3aadb323bedcf39bf6df030d5dbae5dd6fbf4a4356271d7328
SSDEEP

6144:2TV1taX9DA8QL6ZlNzCFQ38CrfhSw8wblKzsMZ4EgUJT90JWBIz:2TV1cX9DjQLKcIh3dlKAjEgUJT9fB

Score

8^/10

execution

Malware Config

Targets

- Target
  
  WizClient.exe
- Size
  
  399KB
- MD5
  
  63725d4c11dd0ab8c2313e234ac130f1
- SHA1
  
  3824b51f49a4529ec87c0b0513874db1ddb32a3b
- SHA256
  
  2fcedcfbaeec9b017a9766d03393371c0945dcb3411fb1bcbd28b7ede135187e
- SHA512
  
  1dbae2f346f22b18d5bcfb96b8423c24fbbc847655a236331adbbf9008776596e38d6c8937b2ab3aadb323bedcf39bf6df030d5dbae5dd6fbf4a4356271d7328
- SSDEEP
  
  6144:2TV1taX9DA8QL6ZlNzCFQ38CrfhSw8wblKzsMZ4EgUJT90JWBIz:2TV1cX9DjQLKcIh3dlKAjEgUJT9fB
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1