b067f9c78f964f2447596b9a05b4eecd1f8d922aa3606695e8079f64fed02327 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Rebel+Cracked.rar
Size

14KB
Sample

240828-z3wresybpq
MD5

7ac8064a08be8ecd0eb9d421b80bd8df
SHA1

47a140e089164a79107b257cfcaa4a54ec786f61
SHA256

b067f9c78f964f2447596b9a05b4eecd1f8d922aa3606695e8079f64fed02327
SHA512

fab3b2d96638521bf8d60c1409caca835593bf9286b7f03b97122e5c65e16602522e033da7073cba9ebd7d5ef89f521421c37d2229f7921e10e397bc460d9c43
SSDEEP

192:g63sS5VeX6vAjhWLeW+m0g7OSty1VycE3YuysASrujWvsBRUbobaqT4c:FsSHtvmh4eW+5gCKrXysAumWvsPaqT9

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  
  Rebel Cracked/Rebel pipe/Program.cs
- Size
  
  1KB
- MD5
  
  c569291ac99bf01186cddf01dac09e9c
- SHA1
  
  e73759b902294ca16e2aeedbefe095b0b9578def
- SHA256
  
  b7414978c94b1cdf45bd1cede027f83bd166abda18f4aa58e5ac3f151a33d856
- SHA512
  
  c5fd9f42ce5e61718a80261da84c235afd67bf2e2f6918e64133fbb546326106f083ad5cbff2c26759142005276a6be612a575906d1a4ed1cc8de829bfbef896
Score

3^/10

execution
behavioral1
- Target
  
  Rebel Cracked/Rebel pipe/obj/Release/Rebel pipe.exe
- Size
  
  5KB
- MD5
  
  903fb157074b5c5fff7e61fbfeffc934
- SHA1
  
  0556c075d2d422727076de3b312a5846e4398f97
- SHA256
  
  888b01b001962b06077b01310710ef687334d3ebbc1bed0f9b210fb1e55a644e
- SHA512
  
  683089e2d752f4450eb540c5a56b7b1cfa14872a7bec72f4dc807c685e3154de4dcb0ffd7246ddf2bde1f21a094cedf2e7a3fefbee4a1e76e5ed3299fffbcfaf
- SSDEEP
  
  48:6AeCqFyttGbMuu2+65c+OCZVNM2EEGMQPnQpF1WOYVjSbbhi54tM6TlXbJTtz2Fz:VGYcdZmRZynYVjaHlV7zNt
Score

3^/10

discovery
behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2