Overview

overview

6

Static

static

3

dllhost.exe

windows10-2004-x64

1

dllhst3g.exe

windows10-2004-x64

1

dmcertinst.exe

windows10-2004-x64

1

dmcfghost.exe

windows10-2004-x64

1

dmclient.exe

windows10-2004-x64

1

dnscacheugc.exe

windows10-2004-x64

4

doskey.exe

windows10-2004-x64

1

dpapimig.exe

windows10-2004-x64

1

dpnsvr.dll

windows10-2004-x64

1

driverquery.exe

windows10-2004-x64

1

drvinst.exe

windows10-2004-x64

1

ntprint.exe

windows10-2004-x64

1

nvspinfo.exe

windows10-2004-x64

1

odbcad32.exe

windows10-2004-x64

1

odbcconf.exe

windows10-2004-x64

1

ofdeploy.exe

windows10-2004-x64

1

omadmclient.exe

windows10-2004-x64

1

omadmprc.exe

windows10-2004-x64

1

openfiles.exe

windows10-2004-x64

1

osk.exe

windows10-2004-x64

3

pacjsworker.exe

windows10-2004-x64

1

pcalua.exe

windows10-2004-x64

1

pcaui.exe

windows10-2004-x64

1

pcwrun.exe

windows10-2004-x64

1

perfmon.exe

windows10-2004-x64

1

phoneactivate.exe

windows10-2004-x64

1

plasrv.exe

windows10-2004-x64

1

pnputil.exe

windows10-2004-x64

1

pospaymentsworker.exe

windows10-2004-x64

1

powercfg.exe

windows10-2004-x64

6

prevhost.exe

windows10-2004-x64

1

print.exe

windows10-2004-x64

1

Resubmissions

09-07-2024 13:39

240709-qydwdayanf 7

09-07-2024 07:52

240709-jqdr3swdle 6

09-07-2024 06:42

240709-hgkzcs1bjl 5

09-07-2024 06:34

240709-hb2d6azhjn 3

09-07-2024 05:47

240709-ggxgqa1crh 4

Sharing

Copy URL
Twitter E-mail

General

  • Target

    application.zip

  • Size

    199.1MB

  • Sample

    240709-jqdr3swdle

  • MD5

    3ff2cfb0d40a8d203dbc8e7e213abfd1

  • SHA1

    51e29901a0e5f7e7c93b22ef07f9ecbcf038fcea

  • SHA256

    9df41ebe1a2c61bbc382a85a7788e127e4dafada4955a1b6c3dfcaf460bd714f

  • SHA512

    a8ca689dce70cad02d3a438fab918b143699eb27c22f7fa40418ea26b154f93db4f99b4611a597720bc0c72933f458c98e3793af800e991ecc783a21da4c466a

  • SSDEEP

    6291456:UOriWJ0ns9w5OrSTi87nm1o/h6aXXRhevjJiEmRA:UOri2qnmwHhhXilixK

Score
6/10
persistenceprivilege_escalation

Malware Config

Targets

    • Target

      dllhost.exe

    • Size

      45KB

    • MD5

      144fa51a15e98d84d28eeab815bc9a8b

    • SHA1

      c521025c55687c1f29b1f3a3c69b3d152ce84981

    • SHA256

      fdfad08eadd54a431e431febe60e87b574ce90e5502ed0be2f026a1828120fc6

    • SHA512

      f0913ebc532d85362ee3192139bcd8ebb20bc1ec6a98c6cefa84797dd9656fea7fd6c32b60f72d6a43bef5400312e326197bc7c76c06ad7d93f35dec32a24f24

    • SSDEEP

      384:S/V4tpd7kYktwVVt6cPa/WA5WIDBRJBjK61x85zR9ztSxY:k47kt6wcCrX1PBH109zYy

    Score
    1/10
    behavioral1

    • Target

      dllhst3g.exe

    • Size

      36KB

    • MD5

      dd7427cafabaf8eec7d4b2460f439ec9

    • SHA1

      58b5dfdc1a8f292ee11f9278dbc6b173755715b3

    • SHA256

      bcac93eada95f030e60b4cdfb693589019dcb76b0aa037d5e71bb004d1b4d0f9

    • SHA512

      b6d8db40484985ef6e8b4846ec75817df7a5d5093718e50c135bdff4d4e81a2a876aab3ee9164c7157deb93be587167c5ff4b3fdcbc2b797f2b84680ff14eff6

    • SSDEEP

      192:lGUF/2Hy4tGswK2eec7kYktwewUWp/iq89aluaEZcPXLmPWZyW:lb/V4tpd7kYktwewUW8q6cPaPWZyW

    Score
    1/10
    behavioral2

    • Target

      dmcertinst.exe

    • Size

      200KB

    • MD5

      508ab3499a13dbd023241516423e36c2

    • SHA1

      e41f8053af98163ae61839bcf1501e67583da153

    • SHA256

      2e959b87192619054a71dc406f78fb4c12c72867627b5e1dc5be9e7bcdee0eb7

    • SHA512

      f040b756ea2a44f266b0a9340a364bbb6775b19a04d9c17d8f6e8348042e417ef5a082310d07d9e0d779584db4597f766809f77702933d5a3d349e0b7b695c02

    • SSDEEP

      3072:vfdpUVm3GEZ8Bjq59SD0SR6D3C48C0+yz/FKzt2FOxVpKeJaPO:vl6s3GE3nSL6D3C46gBAOEeJaP

    Score
    1/10
    behavioral3

    • Target

      dmcfghost.exe

    • Size

      60KB

    • MD5

      a1b66e574b15fda8cde392bd2039ad97

    • SHA1

      c9ea9885b3653758dfd21c8863010c34109a8eeb

    • SHA256

      a6988232d6cee531e7a3a1b01b579f3d392c637e0b0372e2a448effe7b5835b2

    • SHA512

      20f84a5d918c1a35aa6b7775c56695a8982947b2a21e13a8c085ae27135fb0927eae63b552bb599578215bcd75bfe3b5d43d4223f501fa5ad95b0430927c87b1

    • SSDEEP

      768:bo/lJHRHMkaAM1DzCo1rbvWZl0dJ91M3KQiUPQ:bGP7aAM1DNbvWZ+dv1M3diUPQ

    Score
    1/10
    behavioral4

    • Target

      dmclient.exe

    • Size

      160KB

    • MD5

      2600dd80251392cc98c0329b0cb607a3

    • SHA1

      964b33d021c411d9ec6bf2471d7606e21c35bf2b

    • SHA256

      dbea593c79e1c42c98ac2f82830a8005247651b9dcd27b03de85bc9dadb8c056

    • SHA512

      3b2f4fac6cffa723fe5fda9597764acf754a52655068b1be8dc0113c9980e7088116883eadb1227b83d9313e9dbf39f76f20fd89f2d679b1a518b8f282332778

    • SSDEEP

      3072:swpfteBpw/EUG8hnQovLra+7A8SnL7UtSxD2a:swdteBpaG8GeaDfUtwq

    Score
    1/10
    behavioral5

    • Target

      dnscacheugc.exe

    • Size

      56KB

    • MD5

      3a8f14a3351a4517be88df90eec93530

    • SHA1

      14e7cf2f217e38514e834efa2046b5c45a450aa7

    • SHA256

      744c58569bb1c45c9048d8c35f0a93276c41c4e00a5cc26f962f1c1a92615d48

    • SHA512

      901937e13f6871a1daedc969eb95837ad37baaf7ed6788e37e6f5a6278f79dcec87e3b4246b248ca0e38b5ef26fc3d4c2eab4e5b532774a2de6e8482d79f5f56

    • SSDEEP

      768:vP0MKqATgUTXBh7kU7CCZ1rRnDvsI8+f1BLB:vMhqxe8+frB

    Score
    4/10
    behavioral6

    • Target

      doskey.exe

    • Size

      40KB

    • MD5

      814d40a7b47cd3eaacc406f7260419f7

    • SHA1

      40120f41f4f272818622bad3e19c5093eeed07cc

    • SHA256

      aeeda41f56f3ceb3e5b8c6b646d88b4d6ca888fe9b504c3fc723afa7b054f6d3

    • SHA512

      72048ad9632c9180a1b06a207fa2ccd7747ff6ecfd99db6346c4e678a9533ec37650877b8ca4273c6c5a89f0621f88f04f53438672dc055b51485c23f5fb90e0

    • SSDEEP

      384:wE5X8STH/48WvFJ4gjQpGXyG62lIKaCTvJuyuzCB5VyYXWIiW:nVTHw8WvFJ4gjdb68IKaaMoryYb

    Score
    1/10
    behavioral7

    • Target

      dpapimig.exe

    • Size

      96KB

    • MD5

      5b1019c77497ef7e9cf63b4fcb021d3d

    • SHA1

      e7bde015e862dae02dd1b493592b47d0ba307a68

    • SHA256

      9f653b0de6d7ee5cb7cc3eb1b13cdf7684c234cd7f9d30c0fb4b779f78511dd4

    • SHA512

      34642b1188fab4575cdb49db94223610837af40e202dd5b476d595bd6e689f735428d3932230478430b8f7e51f95febaf430758abe039ad6380785648ea3c5dc

    • SSDEEP

      1536:cPyqd9aqo5BUMZW2Z00l3uU1HIED1fCbWpygzU:cPlfalImhuSJj16bE

    Score
    1/10
    behavioral8

    • Target

      dpnsvr.exe

    • Size

      32KB

    • MD5

      959fbac45669cae07c0768cc73331d82

    • SHA1

      cc2b540caee9875ce73c1b195ca1257d8f5e1e32

    • SHA256

      7fa71f7e5a1130035716cb0beb3638ba8512e0616ce0bddf15ea7d0adf923e68

    • SHA512

      5b179ede8991c982f7bb75c24addf8bcfad19dff4013ca0fa222d3fb1e7e1253093842cc83221ea606b860ac8d4eb123ee9518ca8ec4ee5044661b905fae817e

    • SSDEEP

      96:TZ/PPDVJPQQM2M8GsyJJmPpOMdsSAQqNCNjS6qtzrUdcHoUEWxuWw:T1PDNBuQPMMKQqEj+tzrGcqWxuW

    Score
    1/10
    behavioral9

    • Target

      driverquery.exe

    • Size

      100KB

    • MD5

      93b681f8cec938806c03aba7ce2ee690

    • SHA1

      128581c801249919b8df5036b61b1f6909039d96

    • SHA256

      01f13ae42639cfff58b121de5db7edbf3e84199bd50a9f1e6bab8008b315824f

    • SHA512

      07ddeab1de387e1faaf03598403f528d2f4c07e273889cff2ceae728e7ca7445b88191f3a985951c668f7def35c56ec4b17ab1383c40c355509dfa1b831b1a3f

    • SSDEEP

      1536:7/OMeJFQVfNCXJetIO/v3vYX0BpDEjOhSJOFft1ExI/xTy8W:7Pagf8JeV/v3vYX0DNt7EG/xTY

    Score
    1/10
    behavioral10

    • Target

      drvinst.exe

    • Size

      372KB

    • MD5

      dfc6d79b1ba8dade27a0ea6237cb3779

    • SHA1

      0f5aba62c440a7dacba0b231a0d7116c53df5b38

    • SHA256

      9b0de4ba75e729c1249ba580a885f6a9af950795b7f60019fe9cdc112d896178

    • SHA512

      4fe0139dcf86a2446ee059ddf193b9a819ce26d7ec2405b0378eb2f4a4d987b6867275081531d53edbd983b426ed0deac93a41c2be7d03169d966fda8e8b1de1

    • SSDEEP

      6144:GSj/97KCJNK4M1jxTcdlZHRxIamTIFx+//dzqwHtE1Tth+vD:GSj/97hK4eVcnZRxIamF/ZqwHtKtgvD

    Score
    1/10
    behavioral11

    • Target

      ntprint.exe

    • Size

      84KB

    • MD5

      9c9f0e440b3f2a59b8292299442fdfa1

    • SHA1

      3c509e54cdd24828f67d763804e211a350e26d3a

    • SHA256

      fe93b4eef86a785063856d640cb2934a52edd3fef1ba2396abd1cc445e6a4cda

    • SHA512

      af3b6aa0a6587fab997aec4164cb42716340180163c403ae68fdbe5fef750ad0e49490c7858a2384b2503fea474c0fafbe1f237433392d0a77fa9a0e61e494ec

    • SSDEEP

      768:oKYNAw95vI1iQfCIWVM9G4qW4ne+S/ly+PKAoXRZX6fbX57UWkCRPPA7/Qnm:vYzxVIPd4n+lbeRZIbSQPPA7f

    Score
    1/10
    behavioral12

    • Target

      nvspinfo.exe

    • Size

      429KB

    • MD5

      b921f42c5509b972ce6786181ca555d6

    • SHA1

      4c4f176b81d50e0f348ac91b387ed8c695ae71c8

    • SHA256

      a105d8da64be0c42181dce01d08e8ce5d1bb8206b7a540bb69c040076f1a20fd

    • SHA512

      51f52cb529aeffd1d1a3ae01722e32b4910977b21c3b357744ded1b46bb7c84e2fdaec6d252cc1c8b4bf55ae0836ec8723183a9d30d97bae614b6fdf8462ef0c

    • SSDEEP

      6144:XSyEkWuswnykmtRLNJt418a1Mbhaa5RemtWXPkzfaTRyKjhgb8XIO:XSyEkWuNyksNJt4Oa18qTAayO

    Score
    1/10
    behavioral13

    • Target

      odbcad32.exe

    • Size

      96KB

    • MD5

      44fa6db6625824cffcf3ef79a3b8e9d0

    • SHA1

      b2d4826a1b8e6d064d3a1feb83e26cfc7cf1b163

    • SHA256

      de81891d9f950638de932c24022cd03f1b783a80305be66b9d26a7802831cfc2

    • SHA512

      d634247ce58b3d879386b5f616a5b3fa7ba2d2fd8b8d4e7e2d4b4a510986c52838ccf14505402ed84323015d27feb91e4fc20629e2468e9d4d7d766e96ed4580

    • SSDEEP

      1536:9yoisiArDytv3Jrz6q9EyYt9FlUIlbvBjIloW:9frUUKI9jo

    Score
    1/10
    behavioral14

    • Target

      odbcconf.exe

    • Size

      44KB

    • MD5

      e5bf9b951d735aa3bc89fa9f7d22972f

    • SHA1

      2c84ac264aec7299450b620efc6390dd72a16b3a

    • SHA256

      7c9295bd46577bf3b288419ce6f61b579335a0725d33bd15c045ac73f57af77b

    • SHA512

      98147190abed1b695bda56f667e68cfde18bc89869dcd4e54a6e8df864c0b72ff5aec7b269ef91079ddd07142f0f41ddbb42d2f1ab7a8b162233bb2e5c130c70

    • SSDEEP

      768:wJJF9+mlMey91Dk2wICe8AmvvBksZQRtd:wJ/lAW2wICe8AmHCtd

    Score
    1/10
    behavioral15

    • Target

      ofdeploy.exe

    • Size

      96KB

    • MD5

      cf2ae52e81273f725aff73d1de0efa39

    • SHA1

      9ce21104b10cc69386890dd98a91fab6fc0a69e6

    • SHA256

      8ec9094e7632845fd73eb51aecb654db79c0c650bc121bc28c27855a3ed8762e

    • SHA512

      37674491038e633ea252a6bf502a4756c994a1a32bfd23e7aa76eba691a96743942e8bafcb2cc72cda91ed7d4d5f7cdaea84e8883ace37bcfefc0598ca883ce1

    • SSDEEP

      1536:24IdtssDxqXLjPHUowzJjQ6qRFLGKgR/hLivaPy3+sFssss+/in5S8+rKRefg:cdtsiIwzJj5qRFoiv0/inUZrqkg

    Score
    1/10
    behavioral16

    • Target

      omadmclient.exe

    • Size

      468KB

    • MD5

      eb51cdfebdc2711f01d5959ac512ff25

    • SHA1

      4781fb68d2eea059c606adfd143e78cea17e3e54

    • SHA256

      b7335f9bd2ae306d54f8094fda89fb162c08f877a8c50fc238d5d4794764f4d1

    • SHA512

      df49a17b29aaaecd4766a48686658c24baf81e3955f6cf8c5715c7c5ef06283e9715292bf40435586750ef8f8ac23b014d0e7809c1a640d4b06582ca01ff69d3

    • SSDEEP

      6144:oIGq9S5oOh+Wzx9tejNAF5/duNaLExaRpwOmRPnfZnSBU5Y1g3ynAlF0:oIV9aoVWzERAXdukLMaRpL8RSS28g

    Score
    1/10
    behavioral17

    • Target

      omadmprc.exe

    • Size

      136KB

    • MD5

      71d5ad040f2c3f29af08ddc45547823e

    • SHA1

      8a8cebaee45609978d077a22fd0d48cceee622f3

    • SHA256

      0bd0c85e588364cac217601d3d6edbbf22f423b2cf3a927353019408c4949cc5

    • SHA512

      c00b864520de1dbca1f242c1e8689f046817f73fdb0d788d8a29d756210baec4e9cc4f0211c9266a0ca2813a68b8893d63132cb06411493942f9e567b5db4da3

    • SSDEEP

      3072:6tpjAtCSmXvaywMr1zm9vvNC+/dTniLDHtLfwGPO:MBXSNywMr1zMvojLfwk

    Score
    1/10
    behavioral18

    • Target

      openfiles.exe

    • Size

      88KB

    • MD5

      d1ed1ed27f9f52c8c6e8b733f2dd3750

    • SHA1

      703acea93a7fd4b0e4983227841e7193c87cf564

    • SHA256

      587c1fd10e63b9f4db9bf1a659a4945e142d3aa460a6bf33beb0526da06f2ba8

    • SHA512

      722941cea79f94d9b882db886299c3b6106c07e69476ccd944003f1fbcda5fcb8a921396aa7504a410befacb6ad2601e6cf39d48409048bd5615013a0f60c8c1

    • SSDEEP

      1536:twIif01zSNGmbLwNcBDQTNXTrGGBr4pEj5vyA6jHPl3+fmIvrFAxLJt:tmf01m7kNcBjGBr4pEIAuvlX8rFAxLn

    Score
    1/10
    behavioral19

    • Target

      osk.exe

    • Size

      556KB

    • MD5

      8c818d3b035f59617219ef5ca11ca719

    • SHA1

      e62f9333eee8a10216702dbafcdee0bffc6a6304

    • SHA256

      6923821e5f4d8105693fa37230717a2b3ab354db96ad716e596a2ec9f43dec45

    • SHA512

      a7320efb278658d2d2e3604eeda94a83b58b5882206541599d6f3ca8f49e6f0ce72594f67342cfaf22e3dfbcf8524ae6d824c75286964ce6dd82cb9a4cefcf44

    • SSDEEP

      6144:8pYCH/VPNW3QuJgUjE4dac1Oc5RNU0w7lslnCUGw/xIRLtxIRLuovZ:fg/DMQggUjBU0w7lzaoo

    Score
    3/10
    persistenceprivilege_escalation
    behavioral20

    • Target

      pacjsworker.exe

    • Size

      41KB

    • MD5

      4cee78c79392536f8cd2ce9f809117a1

    • SHA1

      c98c85e0d1b1bbc551ba01ca220e8e51becc985b

    • SHA256

      7042169a2f01b798d93df2d66a5f1fa0d25e6a04348d3939a41ba136e5d817fc

    • SHA512

      29ba3bea2c038ef24cb5b34f9b8ae822510cbd3a64e153d56542dd726cd6b0c8657c0705e1f8b57306986decd2a63a95f51868abbe57868ba4b1b320ab28b092

    • SSDEEP

      384:Dz3db6Je9FQ7q2cjWaEAW60DBRJr6R9zyUOuq:DqcyrccE01Pr29zVO3

    Score
    1/10
    behavioral21

    • Target

      pcalua.exe

    • Size

      116KB

    • MD5

      9b33aad21b1d2a8c117b599f3ebeadb5

    • SHA1

      2690d9f5ae1fbfa19c3fd66316e7b2abf65df831

    • SHA256

      c826bf1f231ac39bf5c2f083cab48f0a8769483824589e52c8035fc3aa0d4e37

    • SHA512

      d7ee1cb790d009c2cf2dbbd5d3548fa4ab04225e9edfdbee4957136b6c69b25f148bcd681f08574f9a75dbdd8c36a8f3a7603b98ce9b9be1e7fa4fa7d47ab4be

    • SSDEEP

      1536:sNYK8r1RJrIhJ2ao/UC8Qg7qHCxJm0e7lLV5AIp9w0PrQYFq73wN:syKluaZ8HCxJm0wLQITwzYc7U

    Score
    1/10
    behavioral22

    • Target

      pcaui.exe

    • Size

      208KB

    • MD5

      31d9da37f07d177a55e69e5875827c2b

    • SHA1

      7fa55b5bc8227da6ae40715dba1f7bdca42696cc

    • SHA256

      1726b01171ef0c2b3e330713cfa6684aa32c17ccca08233eff81d4abd39e8524

    • SHA512

      8399b70930c1c37c2a4c413e2b8e127aa0dc05d64107e840082f6f5aadb5d5fc6f9bdc86b2271d732b094c5674628794e74df192698d60bd69d89cbdcf96cab9

    • SSDEEP

      6144:gqCXlRyAljSOgHhRBwK1vBayi7OcC8ox+wZQ8:cXlRnlmtzBwU52cgmQ8

    Score
    1/10
    behavioral23

    • Target

      pcwrun.exe

    • Size

      36KB

    • MD5

      df06f3bdf78a2dfd1c7f48cd54f40ce4

    • SHA1

      bbd944620d432f6475c8451f00e1acb52051100f

    • SHA256

      60987848ced4817bfbcb69ae834a7df2101197e8ab3030d98c8ca8724cab4972

    • SHA512

      56b5f90a597147d5a9dfe52b33125481f3eff884d0473415afeb22be6b6bd66f82d7e202a4b3be7878d33a8d8323d081133c126dbfcbdc155d66ad1c3854f3ac

    • SSDEEP

      192:Wv/StLihJBB52cmh4qURp/atFwSeDbQ/FX1l3gY1CmHWpgW:WvatmLYhfURRowSegx1lrvHWpgW

    Score
    1/10
    behavioral24

    • Target

      perfmon.exe

    • Size

      176KB

    • MD5

      dc82b13ee9e63fdd16bc155397023d23

    • SHA1

      0330473b7db023ffbe70432d87d918b3057645a4

    • SHA256

      9655ed5c3c77eaaad4d063d2a821aac311a06513e8d0fcec7eaf2f412cd54af2

    • SHA512

      f5c4a941fcba3c98bcd324ca080557e3f89e775f57432c521255c3c102a2788f9142fc834702d300c2777fd919ecd6bb121d0b0d6399d862043eca2b7c220bec

    • SSDEEP

      3072:V7M3TjP0LT709dZBybTKT3Pgifo21ii39wB4BZwJdGghtYIo9piswTogiqQKy349:V78jP0LT709dZBybTKTIifo21ii39wO4

    Score
    1/10
    behavioral25

    • Target

      phoneactivate.exe

    • Size

      126KB

    • MD5

      a03a3a5a097e3a9eb8ae2743824cd172

    • SHA1

      f6bc4724600460712339580af253b90f9c981f03

    • SHA256

      8585164548237da64fda697126999f4da4c874b592ccbaf1cd9559004908573d

    • SHA512

      12fd557cce05b0dc9be85840f73714752d744a127b8e81b32994b1cbd16478e1b42de9c97f0b75ce9f329545dd271406c441d9f1cccc8d8a9a69d631c2ca5664

    • SSDEEP

      1536:M9acSEUarKbSCXK4DsypvXGPjzof5WwFek4sumWuzuuucq5ULg6n6Z9j/+2PUzse:qSdarHZ4DsmJ4k4Kga06nM5cge

    Score
    1/10
    behavioral26

    • Target

      plasrv.exe

    • Size

      28KB

    • MD5

      7135a5b1463fdac09659707c59dea1e0

    • SHA1

      eed40ef0cdf90c54c388d322491bc5d0cadb4e6e

    • SHA256

      aaef1b8870efd4dbbc79e416011a3363edcd58138904cc829f72ed4ca115871a

    • SHA512

      ddccd05bb7264f1f9e917e9e24d5bf1d6e1c4574e0e86c4d5a9a045922d6747675ea19d514e6472542a160365916fede9e9668ad2b389b427ce32731d5f3db01

    • SSDEEP

      192:BIwJn9jj8/kjTgWGnfDOnfpw3yOtH5WWeXW:ywrj2k/gWCWpwz4WeXW

    Score
    1/10
    behavioral27

    • Target

      pnputil.exe

    • Size

      200KB

    • MD5

      ad6157047805a6e9eb9345ae0c8760d6

    • SHA1

      3fa6dbf98a769ced269554c4fda0d9b1ebe4de28

    • SHA256

      8430676b4065855163239807c574b5bed86920f8fa97aef2017dab3420103bda

    • SHA512

      d8338d1067a5fc0c1e3d02cc78a7f44b2b0f967b5848a484ce026c69da8cfc96d8823a0927465637c1fcf8ce127a54d7413eedd7dd7627f1990f7881ca431efb

    • SSDEEP

      3072:kLilPTJupfI+IVQWPGHQVwmK+ky8dRXJsmWr:1TJut1/0odRXU

    Score
    1/10
    behavioral28

    • Target

      pospaymentsworker.exe

    • Size

      68KB

    • MD5

      9897e5abd7586ee41a3437e234a384d9

    • SHA1

      9298bf77c0c660b253d99933b99a9e745fdd23be

    • SHA256

      7e3f640ec938f52f209d61e10dfbc188ccede44e5bcfb2ee23fd3dfa712b3375

    • SHA512

      96df9d3c1acac07d10699db9a806f712921f4d30104497bff7f340702b15e21c3686c06ab6ac3965d5eedf7bc7a427327ee81af0c715c870d2450914493e486b

    • SSDEEP

      1536:8hs10h56bm6ChXY8FRSbAnNid8VIV1MBB1cJIexE:8SI5OY9nNmoIV1kB1cJRxE

    Score
    1/10
    behavioral29

    • Target

      powercfg.exe

    • Size

      116KB

    • MD5

      5ec8e8f2994af3fde376d4c19ed979bb

    • SHA1

      b902a24582a7330eb6e75131e71452bee927b845

    • SHA256

      0b115b47d3ed8b00e97138afbae094db8cfee6e108d301fbb090368aefbb68be

    • SHA512

      37c440008b0baad0e4f1bf5b8eb608cdc2c0626f972ec6ad5921d135009fecafbb4714fa5d17669e6b1f50e6407082214b3a95cae45d936be07174dc42a70f17

    • SSDEEP

      1536:0jcdiI1HJ5eXTwY7NHxAw81iMuuZl8sVRByoI3QwjHkGb6mzNM+mM4MmkVNi+O:0ZCr6NOw81iMuussrQoVGbBRrmMD2

    Score
    6/10
    persistence

    • Power Settings

      powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.

      persistence
    behavioral30

    • Target

      prevhost.exe

    • Size

      52KB

    • MD5

      f4180a9c9a506036562698e7907976b3

    • SHA1

      54968048e81d47885ca95c39d08b4356f3256c21

    • SHA256

      38dc2f79eb4f6b7b7dfad2b7143cdc5ce0faafbb32b53f63f4d1f540d397cf34

    • SHA512

      04869be6c3c6ca4ee2ad45eb49ef1c4d9d74821dd85143eb2b6b3e2cfc6251a39269b18506ee88294cfeff226902086b254c4fd02193cccfa4aa3a843f9d2946

    • SSDEEP

      768:jmJf3dpaoUxZIg9cMkshRG1rF0XBZ4bATjLTDNsUNyxX:jmJlpa+/shRG9xbAL2UNyxX

    Score
    1/10
    behavioral31

    • Target

      print.exe

    • Size

      36KB

    • MD5

      b694d9d775ec5090aef1d6edb300260a

    • SHA1

      7e85a15853036c2cbe2c87eccda4fa9ebbb5b1aa

    • SHA256

      aeecaedeccc9dcb0a8d910503f876ef8b9a75f0f2dca1363992befa0f6d11c15

    • SHA512

      c387a9173d90f202ade7fbbe8c9ad045a1f81d3ddc03b059c11bd42b7ea75867159376cfb672ebee213a36a0a51182a062112e5aacda3a68faa30ef46e0fdd6d

    • SSDEEP

      192:iBjFGzw9Bq7O8jzCHXNij+iiv/hOHtinGE077m1WTUW:qCw7qNz8iAv/UHYn4q1WTUW

    Score
    1/10
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
4/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

persistenceprivilege_escalation
Score
3/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

persistence
Score
6/10

behavioral31

Score
1/10

behavioral32

Score
1/10