9df41ebe1a2c61bbc382a85a7788e127e4dafada4955a1b6c3dfcaf460bd714f

Target
application.zip
Size 199.1MB
Sample240709-jqdr3swdle
SHA256 9df41ebe1a2c61bbc382a85a7788e127e4dafada4955a1b6c3dfcaf460bd714f
MD5 3ff2cfb0d40a8d203dbc8e7e213abfd1
SHA1 51e29901a0e5f7e7c93b22ef07f9ecbcf038fcea
SHA512 a8ca689dce70cad02d3a438fab918b143699eb27c22f7fa40418ea26b154f93db4f99b4611a597720bc0c72933f458c98e3793af800e991ecc783a21da4c466a
SSDEEP 6291456:UOriWJ0ns9w5OrSTi87nm1o/h6aXXRhevjJiEmRA:UOri2qnmwHhhXilixK
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  dllhost.exe
- Size 45KB
- SHA256 fdfad08eadd54a431e431febe60e87b574ce90e5502ed0be2f026a1828120fc6
- MD5 144fa51a15e98d84d28eeab815bc9a8b
- SHA1 c521025c55687c1f29b1f3a3c69b3d152ce84981
- SHA512 f0913ebc532d85362ee3192139bcd8ebb20bc1ec6a98c6cefa84797dd9656fea7fd6c32b60f72d6a43bef5400312e326197bc7c76c06ad7d93f35dec32a24f24
- SSDEEP 384:S/V4tpd7kYktwVVt6cPa/WA5WIDBRJBjK61x85zR9ztSxY:k47kt6wcCrX1PBH109zYy
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral1
- Target
  dllhst3g.exe
- Size 36KB
- SHA256 bcac93eada95f030e60b4cdfb693589019dcb76b0aa037d5e71bb004d1b4d0f9
- MD5 dd7427cafabaf8eec7d4b2460f439ec9
- SHA1 58b5dfdc1a8f292ee11f9278dbc6b173755715b3
- SHA512 b6d8db40484985ef6e8b4846ec75817df7a5d5093718e50c135bdff4d4e81a2a876aab3ee9164c7157deb93be587167c5ff4b3fdcbc2b797f2b84680ff14eff6
- SSDEEP 192:lGUF/2Hy4tGswK2eec7kYktwewUWp/iq89aluaEZcPXLmPWZyW:lb/V4tpd7kYktwewUW8q6cPaPWZyW
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral2
- Target
  dmcertinst.exe
- Size 200KB
- SHA256 2e959b87192619054a71dc406f78fb4c12c72867627b5e1dc5be9e7bcdee0eb7
- MD5 508ab3499a13dbd023241516423e36c2
- SHA1 e41f8053af98163ae61839bcf1501e67583da153
- SHA512 f040b756ea2a44f266b0a9340a364bbb6775b19a04d9c17d8f6e8348042e417ef5a082310d07d9e0d779584db4597f766809f77702933d5a3d349e0b7b695c02
- SSDEEP 3072:vfdpUVm3GEZ8Bjq59SD0SR6D3C48C0+yz/FKzt2FOxVpKeJaPO:vl6s3GE3nSL6D3C46gBAOEeJaP
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3
- Target
  dmcfghost.exe
- Size 60KB
- SHA256 a6988232d6cee531e7a3a1b01b579f3d392c637e0b0372e2a448effe7b5835b2
- MD5 a1b66e574b15fda8cde392bd2039ad97
- SHA1 c9ea9885b3653758dfd21c8863010c34109a8eeb
- SHA512 20f84a5d918c1a35aa6b7775c56695a8982947b2a21e13a8c085ae27135fb0927eae63b552bb599578215bcd75bfe3b5d43d4223f501fa5ad95b0430927c87b1
- SSDEEP 768:bo/lJHRHMkaAM1DzCo1rbvWZl0dJ91M3KQiUPQ:bGP7aAM1DNbvWZ+dv1M3diUPQ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral4
- Target
  dmclient.exe
- Size 160KB
- SHA256 dbea593c79e1c42c98ac2f82830a8005247651b9dcd27b03de85bc9dadb8c056
- MD5 2600dd80251392cc98c0329b0cb607a3
- SHA1 964b33d021c411d9ec6bf2471d7606e21c35bf2b
- SHA512 3b2f4fac6cffa723fe5fda9597764acf754a52655068b1be8dc0113c9980e7088116883eadb1227b83d9313e9dbf39f76f20fd89f2d679b1a518b8f282332778
- SSDEEP 3072:swpfteBpw/EUG8hnQovLra+7A8SnL7UtSxD2a:swdteBpaG8GeaDfUtwq
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5
- Target
  dnscacheugc.exe
- Size 56KB
- SHA256 744c58569bb1c45c9048d8c35f0a93276c41c4e00a5cc26f962f1c1a92615d48
- MD5 3a8f14a3351a4517be88df90eec93530
- SHA1 14e7cf2f217e38514e834efa2046b5c45a450aa7
- SHA512 901937e13f6871a1daedc969eb95837ad37baaf7ed6788e37e6f5a6278f79dcec87e3b4246b248ca0e38b5ef26fc3d4c2eab4e5b532774a2de6e8482d79f5f56
- SSDEEP 768:vP0MKqATgUTXBh7kU7CCZ1rRnDvsI8+f1BLB:vMhqxe8+frB
- MD5 SHA1 SHA512 SSDEEP
Score

4^/10
behavioral6
- Target
  doskey.exe
- Size 40KB
- SHA256 aeeda41f56f3ceb3e5b8c6b646d88b4d6ca888fe9b504c3fc723afa7b054f6d3
- MD5 814d40a7b47cd3eaacc406f7260419f7
- SHA1 40120f41f4f272818622bad3e19c5093eeed07cc
- SHA512 72048ad9632c9180a1b06a207fa2ccd7747ff6ecfd99db6346c4e678a9533ec37650877b8ca4273c6c5a89f0621f88f04f53438672dc055b51485c23f5fb90e0
- SSDEEP 384:wE5X8STH/48WvFJ4gjQpGXyG62lIKaCTvJuyuzCB5VyYXWIiW:nVTHw8WvFJ4gjdb68IKaaMoryYb
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7
- Target
  dpapimig.exe
- Size 96KB
- SHA256 9f653b0de6d7ee5cb7cc3eb1b13cdf7684c234cd7f9d30c0fb4b779f78511dd4
- MD5 5b1019c77497ef7e9cf63b4fcb021d3d
- SHA1 e7bde015e862dae02dd1b493592b47d0ba307a68
- SHA512 34642b1188fab4575cdb49db94223610837af40e202dd5b476d595bd6e689f735428d3932230478430b8f7e51f95febaf430758abe039ad6380785648ea3c5dc
- SSDEEP 1536:cPyqd9aqo5BUMZW2Z00l3uU1HIED1fCbWpygzU:cPlfalImhuSJj16bE
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral8
- Target
  dpnsvr.exe
- Size 32KB
- SHA256 7fa71f7e5a1130035716cb0beb3638ba8512e0616ce0bddf15ea7d0adf923e68
- MD5 959fbac45669cae07c0768cc73331d82
- SHA1 cc2b540caee9875ce73c1b195ca1257d8f5e1e32
- SHA512 5b179ede8991c982f7bb75c24addf8bcfad19dff4013ca0fa222d3fb1e7e1253093842cc83221ea606b860ac8d4eb123ee9518ca8ec4ee5044661b905fae817e
- SSDEEP 96:TZ/PPDVJPQQM2M8GsyJJmPpOMdsSAQqNCNjS6qtzrUdcHoUEWxuWw:T1PDNBuQPMMKQqEj+tzrGcqWxuW
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral9
- Target
  driverquery.exe
- Size 100KB
- SHA256 01f13ae42639cfff58b121de5db7edbf3e84199bd50a9f1e6bab8008b315824f
- MD5 93b681f8cec938806c03aba7ce2ee690
- SHA1 128581c801249919b8df5036b61b1f6909039d96
- SHA512 07ddeab1de387e1faaf03598403f528d2f4c07e273889cff2ceae728e7ca7445b88191f3a985951c668f7def35c56ec4b17ab1383c40c355509dfa1b831b1a3f
- SSDEEP 1536:7/OMeJFQVfNCXJetIO/v3vYX0BpDEjOhSJOFft1ExI/xTy8W:7Pagf8JeV/v3vYX0DNt7EG/xTY
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10
- Target
  drvinst.exe
- Size 372KB
- SHA256 9b0de4ba75e729c1249ba580a885f6a9af950795b7f60019fe9cdc112d896178
- MD5 dfc6d79b1ba8dade27a0ea6237cb3779
- SHA1 0f5aba62c440a7dacba0b231a0d7116c53df5b38
- SHA512 4fe0139dcf86a2446ee059ddf193b9a819ce26d7ec2405b0378eb2f4a4d987b6867275081531d53edbd983b426ed0deac93a41c2be7d03169d966fda8e8b1de1
- SSDEEP 6144:GSj/97KCJNK4M1jxTcdlZHRxIamTIFx+//dzqwHtE1Tth+vD:GSj/97hK4eVcnZRxIamF/ZqwHtKtgvD
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11
- Target
  ntprint.exe
- Size 84KB
- SHA256 fe93b4eef86a785063856d640cb2934a52edd3fef1ba2396abd1cc445e6a4cda
- MD5 9c9f0e440b3f2a59b8292299442fdfa1
- SHA1 3c509e54cdd24828f67d763804e211a350e26d3a
- SHA512 af3b6aa0a6587fab997aec4164cb42716340180163c403ae68fdbe5fef750ad0e49490c7858a2384b2503fea474c0fafbe1f237433392d0a77fa9a0e61e494ec
- SSDEEP 768:oKYNAw95vI1iQfCIWVM9G4qW4ne+S/ly+PKAoXRZX6fbX57UWkCRPPA7/Qnm:vYzxVIPd4n+lbeRZIbSQPPA7f
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral12
- Target
  nvspinfo.exe
- Size 429KB
- SHA256 a105d8da64be0c42181dce01d08e8ce5d1bb8206b7a540bb69c040076f1a20fd
- MD5 b921f42c5509b972ce6786181ca555d6
- SHA1 4c4f176b81d50e0f348ac91b387ed8c695ae71c8
- SHA512 51f52cb529aeffd1d1a3ae01722e32b4910977b21c3b357744ded1b46bb7c84e2fdaec6d252cc1c8b4bf55ae0836ec8723183a9d30d97bae614b6fdf8462ef0c
- SSDEEP 6144:XSyEkWuswnykmtRLNJt418a1Mbhaa5RemtWXPkzfaTRyKjhgb8XIO:XSyEkWuNyksNJt4Oa18qTAayO
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13
- Target
  odbcad32.exe
- Size 96KB
- SHA256 de81891d9f950638de932c24022cd03f1b783a80305be66b9d26a7802831cfc2
- MD5 44fa6db6625824cffcf3ef79a3b8e9d0
- SHA1 b2d4826a1b8e6d064d3a1feb83e26cfc7cf1b163
- SHA512 d634247ce58b3d879386b5f616a5b3fa7ba2d2fd8b8d4e7e2d4b4a510986c52838ccf14505402ed84323015d27feb91e4fc20629e2468e9d4d7d766e96ed4580
- SSDEEP 1536:9yoisiArDytv3Jrz6q9EyYt9FlUIlbvBjIloW:9frUUKI9jo
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral14
- Target
  odbcconf.exe
- Size 44KB
- SHA256 7c9295bd46577bf3b288419ce6f61b579335a0725d33bd15c045ac73f57af77b
- MD5 e5bf9b951d735aa3bc89fa9f7d22972f
- SHA1 2c84ac264aec7299450b620efc6390dd72a16b3a
- SHA512 98147190abed1b695bda56f667e68cfde18bc89869dcd4e54a6e8df864c0b72ff5aec7b269ef91079ddd07142f0f41ddbb42d2f1ab7a8b162233bb2e5c130c70
- SSDEEP 768:wJJF9+mlMey91Dk2wICe8AmvvBksZQRtd:wJ/lAW2wICe8AmHCtd
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15
- Target
  ofdeploy.exe
- Size 96KB
- SHA256 8ec9094e7632845fd73eb51aecb654db79c0c650bc121bc28c27855a3ed8762e
- MD5 cf2ae52e81273f725aff73d1de0efa39
- SHA1 9ce21104b10cc69386890dd98a91fab6fc0a69e6
- SHA512 37674491038e633ea252a6bf502a4756c994a1a32bfd23e7aa76eba691a96743942e8bafcb2cc72cda91ed7d4d5f7cdaea84e8883ace37bcfefc0598ca883ce1
- SSDEEP 1536:24IdtssDxqXLjPHUowzJjQ6qRFLGKgR/hLivaPy3+sFssss+/in5S8+rKRefg:cdtsiIwzJj5qRFoiv0/inUZrqkg
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral16
- Target
  omadmclient.exe
- Size 468KB
- SHA256 b7335f9bd2ae306d54f8094fda89fb162c08f877a8c50fc238d5d4794764f4d1
- MD5 eb51cdfebdc2711f01d5959ac512ff25
- SHA1 4781fb68d2eea059c606adfd143e78cea17e3e54
- SHA512 df49a17b29aaaecd4766a48686658c24baf81e3955f6cf8c5715c7c5ef06283e9715292bf40435586750ef8f8ac23b014d0e7809c1a640d4b06582ca01ff69d3
- SSDEEP 6144:oIGq9S5oOh+Wzx9tejNAF5/duNaLExaRpwOmRPnfZnSBU5Y1g3ynAlF0:oIV9aoVWzERAXdukLMaRpL8RSS28g
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral17
- Target
  omadmprc.exe
- Size 136KB
- SHA256 0bd0c85e588364cac217601d3d6edbbf22f423b2cf3a927353019408c4949cc5
- MD5 71d5ad040f2c3f29af08ddc45547823e
- SHA1 8a8cebaee45609978d077a22fd0d48cceee622f3
- SHA512 c00b864520de1dbca1f242c1e8689f046817f73fdb0d788d8a29d756210baec4e9cc4f0211c9266a0ca2813a68b8893d63132cb06411493942f9e567b5db4da3
- SSDEEP 3072:6tpjAtCSmXvaywMr1zm9vvNC+/dTniLDHtLfwGPO:MBXSNywMr1zMvojLfwk
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral18
- Target
  openfiles.exe
- Size 88KB
- SHA256 587c1fd10e63b9f4db9bf1a659a4945e142d3aa460a6bf33beb0526da06f2ba8
- MD5 d1ed1ed27f9f52c8c6e8b733f2dd3750
- SHA1 703acea93a7fd4b0e4983227841e7193c87cf564
- SHA512 722941cea79f94d9b882db886299c3b6106c07e69476ccd944003f1fbcda5fcb8a921396aa7504a410befacb6ad2601e6cf39d48409048bd5615013a0f60c8c1
- SSDEEP 1536:twIif01zSNGmbLwNcBDQTNXTrGGBr4pEj5vyA6jHPl3+fmIvrFAxLJt:tmf01m7kNcBjGBr4pEIAuvlX8rFAxLn
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral19
- Target
  osk.exe
- Size 556KB
- SHA256 6923821e5f4d8105693fa37230717a2b3ab354db96ad716e596a2ec9f43dec45
- MD5 8c818d3b035f59617219ef5ca11ca719
- SHA1 e62f9333eee8a10216702dbafcdee0bffc6a6304
- SHA512 a7320efb278658d2d2e3604eeda94a83b58b5882206541599d6f3ca8f49e6f0ce72594f67342cfaf22e3dfbcf8524ae6d824c75286964ce6dd82cb9a4cefcf44
- SSDEEP 6144:8pYCH/VPNW3QuJgUjE4dac1Oc5RNU0w7lslnCUGw/xIRLtxIRLuovZ:fg/DMQggUjBU0w7lzaoo
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

persistence privilege_escalation
behavioral20
- Target
  pacjsworker.exe
- Size 41KB
- SHA256 7042169a2f01b798d93df2d66a5f1fa0d25e6a04348d3939a41ba136e5d817fc
- MD5 4cee78c79392536f8cd2ce9f809117a1
- SHA1 c98c85e0d1b1bbc551ba01ca220e8e51becc985b
- SHA512 29ba3bea2c038ef24cb5b34f9b8ae822510cbd3a64e153d56542dd726cd6b0c8657c0705e1f8b57306986decd2a63a95f51868abbe57868ba4b1b320ab28b092
- SSDEEP 384:Dz3db6Je9FQ7q2cjWaEAW60DBRJr6R9zyUOuq:DqcyrccE01Pr29zVO3
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral21
- Target
  pcalua.exe
- Size 116KB
- SHA256 c826bf1f231ac39bf5c2f083cab48f0a8769483824589e52c8035fc3aa0d4e37
- MD5 9b33aad21b1d2a8c117b599f3ebeadb5
- SHA1 2690d9f5ae1fbfa19c3fd66316e7b2abf65df831
- SHA512 d7ee1cb790d009c2cf2dbbd5d3548fa4ab04225e9edfdbee4957136b6c69b25f148bcd681f08574f9a75dbdd8c36a8f3a7603b98ce9b9be1e7fa4fa7d47ab4be
- SSDEEP 1536:sNYK8r1RJrIhJ2ao/UC8Qg7qHCxJm0e7lLV5AIp9w0PrQYFq73wN:syKluaZ8HCxJm0wLQITwzYc7U
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral22
- Target
  pcaui.exe
- Size 208KB
- SHA256 1726b01171ef0c2b3e330713cfa6684aa32c17ccca08233eff81d4abd39e8524
- MD5 31d9da37f07d177a55e69e5875827c2b
- SHA1 7fa55b5bc8227da6ae40715dba1f7bdca42696cc
- SHA512 8399b70930c1c37c2a4c413e2b8e127aa0dc05d64107e840082f6f5aadb5d5fc6f9bdc86b2271d732b094c5674628794e74df192698d60bd69d89cbdcf96cab9
- SSDEEP 6144:gqCXlRyAljSOgHhRBwK1vBayi7OcC8ox+wZQ8:cXlRnlmtzBwU52cgmQ8
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral23
- Target
  pcwrun.exe
- Size 36KB
- SHA256 60987848ced4817bfbcb69ae834a7df2101197e8ab3030d98c8ca8724cab4972
- MD5 df06f3bdf78a2dfd1c7f48cd54f40ce4
- SHA1 bbd944620d432f6475c8451f00e1acb52051100f
- SHA512 56b5f90a597147d5a9dfe52b33125481f3eff884d0473415afeb22be6b6bd66f82d7e202a4b3be7878d33a8d8323d081133c126dbfcbdc155d66ad1c3854f3ac
- SSDEEP 192:Wv/StLihJBB52cmh4qURp/atFwSeDbQ/FX1l3gY1CmHWpgW:WvatmLYhfURRowSegx1lrvHWpgW
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral24
- Target
  perfmon.exe
- Size 176KB
- SHA256 9655ed5c3c77eaaad4d063d2a821aac311a06513e8d0fcec7eaf2f412cd54af2
- MD5 dc82b13ee9e63fdd16bc155397023d23
- SHA1 0330473b7db023ffbe70432d87d918b3057645a4
- SHA512 f5c4a941fcba3c98bcd324ca080557e3f89e775f57432c521255c3c102a2788f9142fc834702d300c2777fd919ecd6bb121d0b0d6399d862043eca2b7c220bec
- SSDEEP 3072:V7M3TjP0LT709dZBybTKT3Pgifo21ii39wB4BZwJdGghtYIo9piswTogiqQKy349:V78jP0LT709dZBybTKTIifo21ii39wO4
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral25
- Target
  phoneactivate.exe
- Size 126KB
- SHA256 8585164548237da64fda697126999f4da4c874b592ccbaf1cd9559004908573d
- MD5 a03a3a5a097e3a9eb8ae2743824cd172
- SHA1 f6bc4724600460712339580af253b90f9c981f03
- SHA512 12fd557cce05b0dc9be85840f73714752d744a127b8e81b32994b1cbd16478e1b42de9c97f0b75ce9f329545dd271406c441d9f1cccc8d8a9a69d631c2ca5664
- SSDEEP 1536:M9acSEUarKbSCXK4DsypvXGPjzof5WwFek4sumWuzuuucq5ULg6n6Z9j/+2PUzse:qSdarHZ4DsmJ4k4Kga06nM5cge
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral26
- Target
  plasrv.exe
- Size 28KB
- SHA256 aaef1b8870efd4dbbc79e416011a3363edcd58138904cc829f72ed4ca115871a
- MD5 7135a5b1463fdac09659707c59dea1e0
- SHA1 eed40ef0cdf90c54c388d322491bc5d0cadb4e6e
- SHA512 ddccd05bb7264f1f9e917e9e24d5bf1d6e1c4574e0e86c4d5a9a045922d6747675ea19d514e6472542a160365916fede9e9668ad2b389b427ce32731d5f3db01
- SSDEEP 192:BIwJn9jj8/kjTgWGnfDOnfpw3yOtH5WWeXW:ywrj2k/gWCWpwz4WeXW
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral27
- Target
  pnputil.exe
- Size 200KB
- SHA256 8430676b4065855163239807c574b5bed86920f8fa97aef2017dab3420103bda
- MD5 ad6157047805a6e9eb9345ae0c8760d6
- SHA1 3fa6dbf98a769ced269554c4fda0d9b1ebe4de28
- SHA512 d8338d1067a5fc0c1e3d02cc78a7f44b2b0f967b5848a484ce026c69da8cfc96d8823a0927465637c1fcf8ce127a54d7413eedd7dd7627f1990f7881ca431efb
- SSDEEP 3072:kLilPTJupfI+IVQWPGHQVwmK+ky8dRXJsmWr:1TJut1/0odRXU
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral28
- Target
  pospaymentsworker.exe
- Size 68KB
- SHA256 7e3f640ec938f52f209d61e10dfbc188ccede44e5bcfb2ee23fd3dfa712b3375
- MD5 9897e5abd7586ee41a3437e234a384d9
- SHA1 9298bf77c0c660b253d99933b99a9e745fdd23be
- SHA512 96df9d3c1acac07d10699db9a806f712921f4d30104497bff7f340702b15e21c3686c06ab6ac3965d5eedf7bc7a427327ee81af0c715c870d2450914493e486b
- SSDEEP 1536:8hs10h56bm6ChXY8FRSbAnNid8VIV1MBB1cJIexE:8SI5OY9nNmoIV1kB1cJRxE
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral29
- Target
  powercfg.exe
- Size 116KB
- SHA256 0b115b47d3ed8b00e97138afbae094db8cfee6e108d301fbb090368aefbb68be
- MD5 5ec8e8f2994af3fde376d4c19ed979bb
- SHA1 b902a24582a7330eb6e75131e71452bee927b845
- SHA512 37c440008b0baad0e4f1bf5b8eb608cdc2c0626f972ec6ad5921d135009fecafbb4714fa5d17669e6b1f50e6407082214b3a95cae45d936be07174dc42a70f17
- SSDEEP 1536:0jcdiI1HJ5eXTwY7NHxAw81iMuuZl8sVRByoI3QwjHkGb6mzNM+mM4MmkVNi+O:0ZCr6NOw81iMuussrQoVGbBRrmMD2
- MD5 SHA1 SHA512 SSDEEP
Score

6^/10

persistence
- Power Settings
  powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.
  persistence
behavioral30
- Target
  prevhost.exe
- Size 52KB
- SHA256 38dc2f79eb4f6b7b7dfad2b7143cdc5ce0faafbb32b53f63f4d1f540d397cf34
- MD5 f4180a9c9a506036562698e7907976b3
- SHA1 54968048e81d47885ca95c39d08b4356f3256c21
- SHA512 04869be6c3c6ca4ee2ad45eb49ef1c4d9d74821dd85143eb2b6b3e2cfc6251a39269b18506ee88294cfeff226902086b254c4fd02193cccfa4aa3a843f9d2946
- SSDEEP 768:jmJf3dpaoUxZIg9cMkshRG1rF0XBZ4bATjLTDNsUNyxX:jmJlpa+/shRG9xbAL2UNyxX
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral31
- Target
  print.exe
- Size 36KB
- SHA256 aeecaedeccc9dcb0a8d910503f876ef8b9a75f0f2dca1363992befa0f6d11c15
- MD5 b694d9d775ec5090aef1d6edb300260a
- SHA1 7e85a15853036c2cbe2c87eccda4fa9ebbb5b1aa
- SHA512 c387a9173d90f202ade7fbbe8c9ad045a1f81d3ddc03b059c11bd42b7ea75867159376cfb672ebee213a36a0a51182a062112e5aacda3a68faa30ef46e0fdd6d
- SSDEEP 192:iBjFGzw9Bq7O8jzCHXNij+iiv/hOHtinGE077m1WTUW:qCw7qNz8iAv/UHYn4q1WTUW
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Accessibility Features

T1546.008

Power Settings

T1653

Privilege Escalation

Event Triggered Execution

T1546

Accessibility Features

T1546.008

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Power Settings

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32