51aa38810bf2c2f6f08eee6a75809543e78dc241a4587a8d0a0b0a76883be58a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20240826-1019_f53c60f1bc01c38d6ea6284d6c2bfc23.exe
Size

6KB
Sample

240826-bqgjzaycqp
MD5

01846777e9d687771f28a1df5797b151
SHA1

4ede6b7ebee249b6cb241d1fb4b23f79d9aeca12
SHA256

51aa38810bf2c2f6f08eee6a75809543e78dc241a4587a8d0a0b0a76883be58a
SHA512

9e189c2ec6fbe481e4c3c6b3f0c5a648dcebd1779d70d938f9d193e157fcbe5c092ba438a662837fb1473bbf7e89bea3efc4c289d3d36130e7c37719834c8927
SSDEEP

48:0Pzuz3/foXeYDjyaAYqMettsQSaJiTi8xLEcztPLb3b3vr5vEuu6P+65I6rbJu:0P67TeuaABBDSyst9pvr51V+65vu

Score

8^/10

discovery execution

Malware Config

Targets

- Target
  
  20240826-1019_f53c60f1bc01c38d6ea6284d6c2bfc23.exe
- Size
  
  6KB
- MD5
  
  01846777e9d687771f28a1df5797b151
- SHA1
  
  4ede6b7ebee249b6cb241d1fb4b23f79d9aeca12
- SHA256
  
  51aa38810bf2c2f6f08eee6a75809543e78dc241a4587a8d0a0b0a76883be58a
- SHA512
  
  9e189c2ec6fbe481e4c3c6b3f0c5a648dcebd1779d70d938f9d193e157fcbe5c092ba438a662837fb1473bbf7e89bea3efc4c289d3d36130e7c37719834c8927
- SSDEEP
  
  48:0Pzuz3/foXeYDjyaAYqMettsQSaJiTi8xLEcztPLb3b3vr5vEuu6P+65I6rbJu:0P67TeuaABBDSyst9pvr51V+65vu
Score

8^/10

discovery execution
- Blocklisted process makes network request
- Command and Scripting Interpreter: PowerShell
  Powershell Invoke Web Request.
  execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

behavioral2

discoveryexecution