3cdd3b2ac55254a7b3e741c8d168c5caf558e22752195424437a97e1543117f3 | Triage

Sharing

General

Target

3cdd3b2ac55254a7b3e741c8d168c5caf558e22752195424437a97e1543117f3.7z
Size

507KB
Sample

240727-bn2r5azgqd
MD5

11e9fc8d4e555666352a58b95df2d0f6
SHA1

7437a70b2158f8161a4823cfe5bb46c4e95e8abc
SHA256

3cdd3b2ac55254a7b3e741c8d168c5caf558e22752195424437a97e1543117f3
SHA512

2e784b94b0b0ba77eb792182391d644e69c5732f20fb9da6b6877a1c97b7deca2e795bcdee5bc5a270766821fb1641b8a6f9e77e278cccd5ae3efc3f0b768f04
SSDEEP

12288:cx5TNKk/Yhzyci7R4SUGb0IYAdF0yof0YAN7fMha8xz:cx5zGyd4vGb0DAif0YAN7MIiz

Score

8^/10

discovery execution

Malware Config

Targets

- Target
  
  PO Tournefortian2453525525235235623425523235.exe
- Size
  
  855KB
- MD5
  
  d332bcaa3c61494b774f49bf3e716c21
- SHA1
  
  8cdfa60c6b3f25c7d48753e50c298b746c3386de
- SHA256
  
  d61208c85ce83c279dd87495f0dfc1cf5c345d2bf3a6e739279dcf188e19b21d
- SHA512
  
  40a405252934e0ece7e24514bf041674c84559d94f0791183c77268e154387ac8c452838237c33f55434a3eb04c8f47e818f9d7172cc5295ef9af86e92f80942
- SSDEEP
  
  12288:R3IpD7+TUoYhjjPDU6dK7UVEnNH8nUg1EbV3O9XqOqLI4VpStZB:R3IUwHhjjPVdK7UVEp8nU6C2qOaUB
Score

8^/10

discovery execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

behavioral2

discoveryexecution