a6e394a07957c40563cda3a23aab9167c92dadfc7d2566dad760265d6150a17f | Triage

Sharing

General

Target

RedFinished.bat
Size

2KB
Sample

240826-dk2n3ashmj
MD5

b1db554c33d0d3ea8f4337527d88afd3
SHA1

3308cc08c5fed1728912d4a1caa1a0cbab168973
SHA256

a6e394a07957c40563cda3a23aab9167c92dadfc7d2566dad760265d6150a17f
SHA512

d23ead49d43b2feb464368010f02c98cf5c2d301e58bc35a4dffca97f640fe886d1c52901a89d12cdfa9bb0715cf1777d8db2eff8cd5b7cb35be753837d2f9b1

Score

10^/10

evasion execution trojan

Malware Config

Targets

- Target
  
  RedFinished.bat
- Size
  
  2KB
- MD5
  
  b1db554c33d0d3ea8f4337527d88afd3
- SHA1
  
  3308cc08c5fed1728912d4a1caa1a0cbab168973
- SHA256
  
  a6e394a07957c40563cda3a23aab9167c92dadfc7d2566dad760265d6150a17f
- SHA512
  
  d23ead49d43b2feb464368010f02c98cf5c2d301e58bc35a4dffca97f640fe886d1c52901a89d12cdfa9bb0715cf1777d8db2eff8cd5b7cb35be753837d2f9b1
Score

10^/10

evasion execution trojan
- UAC bypass
  evasion trojan
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionexecutiontrojan

behavioral2

evasionexecutiontrojan