Overview

overview

4

Static

static

3

SearchFilterHost.exe

windows10-2004-x64

3

SearchIndexer.exe

windows10-2004-x64

1

SearchProt...st.exe

windows10-2004-x64

SecEdit.exe

windows10-2004-x64

3

SndVol.exe

windows10-2004-x64

3

SpatialAud...rv.exe

windows10-2004-x64

1

SyncHost.exe

windows10-2004-x64

3

SystemProp...ed.exe

windows10-2004-x64

3

SystemProp...me.exe

windows10-2004-x64

3

SystemProp...on.exe

windows10-2004-x64

3

SystemProp...re.exe

windows10-2004-x64

3

SystemProp...ce.exe

windows10-2004-x64

3

SystemProp...on.exe

windows10-2004-x64

3

sc.exe

windows10-2004-x64

4

schtasks.exe

windows10-2004-x64

3

sdbinst.exe

windows10-2004-x64

3

sdchange.exe

windows10-2004-x64

3

sdiagnhost.exe

windows10-2004-x64

3

sethc.exe

windows10-2004-x64

3

setup16.exe

windows10-2004-x64

3

setupugc.exe

windows10-2004-x64

4

setx.exe

windows10-2004-x64

3

sfc.exe

windows10-2004-x64

3

shrpubw.exe

windows10-2004-x64

3

shutdown.exe

windows10-2004-x64

3

sort.exe

windows10-2004-x64

1

stordiag.exe

windows10-2004-x64

1

subst.exe

windows10-2004-x64

3

svchost.exe

windows10-2004-x64

1

sxstrace.exe

windows10-2004-x64

3

systeminfo.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    CWindowsSysWOW64-3.zip

  • Size

    1.8MB

  • Sample

    240829-xzl2psyerr

  • MD5

    d86832898ecbe25bf91441cfe627d3c3

  • SHA1

    e07a7699cff4d4e5c7816bc417e645827803a9db

  • SHA256

    b635555deae2b2eeefc8996e10eb13bc82b82376d9848892853925703cc76dea

  • SHA512

    482a131e4a08f333689a683d4b3da9dac2aba1537ca55c1ee731fd91c34607873e30ddebf0cab86a9959cb72bc1a48bc5b5348915c6b1733b9c5be685fae5b51

  • SSDEEP

    49152:bBFb2NJrrG8p/tDbexj2YxWLJwGSPKx5UjYfpOD6o0w78:9xapFSj1WLJ4PKUjM20S8

Score
4/10
discoverypersistenceprivilege_escalation

Malware Config

Targets

    • Target

      SearchFilterHost.exe

    • Size

      222KB

    • MD5

      65446d65452da21b6814cbeb030b3fff

    • SHA1

      e5191347d95c6433449b60c94a02457cce310703

    • SHA256

      92364e4b761a081032db1472649b64cd38d7d837878226de678a325eecfa66fe

    • SHA512

      db56cd3f9b5243745f33dbb3a52580ae0951508cf58d434962f831389d15054a94f06d17860c26efae5966bb2d3f202fd7dc67de0c26d41d6a054e41bc96ea63

    • SSDEEP

      3072:8V0xIh/f4d4jv1pl175xEAfD8oNfiOqhQ1PfkKQBvE76E1ihk6kvtfGq0ev3U5Wa:8ODgdV75xEAfrVQBvE7WrkR10efUKQ

    Score
    3/10
    discovery
    behavioral1

    • Target

      SearchIndexer.exe

    • Size

      699KB

    • MD5

      6fb27be60f1dcf5e721a0751e9dc80cd

    • SHA1

      b2ad65d4fa95d9abbc7b011c0ff7d956894ae4ff

    • SHA256

      2d7027ea9edefc701a80b185727e08c60814d28add287a4b6bf18d8c55476f49

    • SHA512

      5c7b6de34dc905566f519126bbfd4d9be39c672dd53550c8d2a8f5ad843b5f6dfb580e6d22420da1264d97e8b5904777837b0539e7e5db463ebd4051e106f70c

    • SSDEEP

      12288:fm9n8YcYZBIp+gsGmxehiOFpN7igXtSalnuCzI3X5efdS9Rgdsm+HB501L:Snbmp+gDmk4WpN7BtSq2UdYgdT+HB501

    Score
    1/10
    behavioral2

    • Target

      SearchProtocolHost.exe

    • Size

      338KB

    • MD5

      118fbba047dbe2266738b3057772ab12

    • SHA1

      0a37356aeb4ed12fd1f64daceb1a2dbfe047111d

    • SHA256

      c67db1c20c8709e228d8774e79b740a51e2d6e38b58c9f78c3d3638177da8790

    • SHA512

      30ec65193e41b5f418516695cb0443907104c5a236e70c485f62e90d5f2f41d8d396c82b12cd3cc8f92fddfcf193e4657cf39f2e0c4741c54ac2029f8a48f94a

    • SSDEEP

      6144:ndcpE8Z5PQ4ycI2Dm993QDXrrem8w4Q1Nw+rkR10efUK36:n2p15PWOmLjm8Cw+Qztf9

    Score
    3/10
    discovery
    behavioral3

    • Target

      SecEdit.exe

    • Size

      37KB

    • MD5

      e8ef5acdb53a2e739b2b12253766d6cf

    • SHA1

      9a62d107955e4ea948c496cb6ec2191381932be8

    • SHA256

      aa8bb9732afa8666981ecc6e9a5600f8f5e062d51dffe5d63758542848512fd7

    • SHA512

      0ab3a5e8dcf73b247ec54b9d498891d7f2642b5420f831c657543794952a88493bd749a84c122d45129953c5c7bb00027dd5701824a75cfd419817d9fe518271

    • SSDEEP

      384:/qbUG+YE89bzFa2Ox41jlLpq4d7SxPGabWAzHiWOaXq0lDf2Bh7/oSXkoQfwZq:ibN+YPbH91jVgsOPGaT9JqT7/pXkOq

    Score
    3/10
    discovery
    behavioral4

    • Target

      SndVol.exe

    • Size

      239KB

    • MD5

      a672592323c52129b76e0587d185091c

    • SHA1

      33f43d9b1fafc17d4c4edb9f9e2d0fd742e01431

    • SHA256

      f80cbe0c3fa7eab170ead65a1512bac08227b6fac390d4433ac79075482d423c

    • SHA512

      a9a9465744b9cdd4b1b476da61a62c96e010cc66af46d16b0c0a836aa9363b71cbac259fd9e7e198fbb6c8b9345a07bbfce704e4155499fc68881e5dc6c221ec

    • SSDEEP

      3072:VHO+V1ZEpK4OtuLlH2IJkxOTqaBjbnycLFIyItq1NX1jbEyB7HbIipGrEj1:9OY3E5jJ7TqAbnxJItmay10tW

    Score
    3/10
    discovery
    behavioral5

    • Target

      SpatialAudioLicenseSrv.exe

    • Size

      138KB

    • MD5

      03832a2c541c9125c1f6801ca5f60ddf

    • SHA1

      eb64c14e78dc8d88f9c90b295718a65a1a945f13

    • SHA256

      9da255adbd617207167a100c2ac37bbb73f0282decfb125e1be373cb33a719ef

    • SHA512

      5f6884d6ba51ea62bcb2cf24e0124a3ebdba4276ffbf59ad7cdc77036c0778a6d583a3668fd73fa5ddbc019626d506bc84300125d3a940e6bdcb27ad3fe1a675

    • SSDEEP

      3072:ssb3nvkRUJp/9uKss8hOGnFgbb/728+T924WJrddgd8CZ8mKwlAkiqXy29LJ21Gq:j9qDsGiCRKiA3qCwJwM/

    Score
    1/10
    behavioral6

    • Target

      SyncHost.exe

    • Size

      40KB

    • MD5

      7e3b590c671619ea7b3906acb50489c1

    • SHA1

      803e16d2633def9e52f89efe6a0e10d254322063

    • SHA256

      0da3823547ed70e44f7f03f6328abecdd76518531c7d94a27962fdf27716d257

    • SHA512

      b4793e87643407f2b766c386cbf02bb669210e3f82499c6402586df3c9934857170e1462a4984ed876198c46b0c95687e6bcf8eb4a0268d240d63089c8e344a8

    • SSDEEP

      768:T5IFjE6HTlNavXCN3Phz60WgN6YkMZMb0SHJvmCei1:TeFA6HR0vSZPhNbmJ5Hf

    Score
    3/10
    discovery
    behavioral7

    • Target

      SystemPropertiesAdvanced.exe

    • Size

      81KB

    • MD5

      26b7331a0035637565c68e99d074761d

    • SHA1

      a6f9f083db9f38b17e1525b6afacd9ab1647e4fa

    • SHA256

      4995194b9880c0f9a495a7a4a32e2502626e3308370ab6cede08b06dfd519f09

    • SHA512

      68b3e89638dfc7fb744516f656f238fd6719e2c02ce98d22e4e42aa9633243a7bab3f4cba895e27bfbb31ad6eb3576aebe283a35937fb6e34b1cec76d83f0265

    • SSDEEP

      1536:yraZURtREC/rMcgEPJV+G57ThjEC0kzJP+V5JS:yoSzECTMpuDhjRVJGM

    Score
    3/10
    discovery
    behavioral8

    • Target

      SystemPropertiesComputerName.exe

    • Size

      81KB

    • MD5

      9d163f6dcddc2b7fd29461eece80ad09

    • SHA1

      cbaa51083ae08c628b8ea90a03faacae8a97f5ae

    • SHA256

      99294ce16da2613d226fab8947a671fce720421c197db567b6a143611a63dbd7

    • SHA512

      94987ab894238823c4574db96aeeafce6cbf6647d6c2511881b9099460fa5160584df4925f6ee41c16f62da1a5f107853181001c3647ea9539d7e0195f01e587

    • SSDEEP

      1536:CraZatREC/rMcgEPJV+G57ThjEC0kzJP+V5JG:CoazECTMpuDhjRVJGA

    Score
    3/10
    discovery
    behavioral9

    • Target

      SystemPropertiesDataExecutionPrevention.exe

    • Size

      81KB

    • MD5

      b06a13757d0e4911f7ac39d1a7be0b30

    • SHA1

      c5276b0ea32417826622e02367bdf1c59ca46ae9

    • SHA256

      f22e9e8a9cdd9989d26021b0835744290fd14175e71f4a4ea8ed4774354d36ae

    • SHA512

      f2b8d7c1e45a2e84a278701d1beef5dc98f9a0dee8f2069945e8ddf5957c2ed91c9d151dc2da5ed279cf5e3eda9e3265c2d46d575704ced992d8eae68dc0c1cc

    • SSDEEP

      1536:xLbZ6tREC/rMcgEPJV+G57ThjEC0kzJP+V5Jv:xh6zECTMpuDhjRVJGZ

    Score
    3/10
    discovery
    behavioral10

    • Target

      SystemPropertiesHardware.exe

    • Size

      81KB

    • MD5

      23f4c561051cdc970e48b198eaa355ec

    • SHA1

      5945b8d91690bf9b3a2c7d6fedcbd842aca8b724

    • SHA256

      1b52c2877d4483cc1a693585c933d8190a94b2e69508d2dc1ca99b2746f37839

    • SHA512

      4cbf3a1abffc3b134ad3699163772b1995cf613f686058ba30204ade5fc40c0f6da700e2b4ac1528437c6a8fd9de76f5ced0b6d5cefceb8b1f75c2c31c3e079c

    • SSDEEP

      1536:mraZEFtREC/rMcgEPJV+G57ThjEC0kzJP+V5Jv:momzECTMpuDhjRVJGp

    Score
    3/10
    discovery
    behavioral11

    • Target

      SystemPropertiesPerformance.exe

    • Size

      81KB

    • MD5

      ce1c0dc9dc2ac08fbd7edb6d30927b0b

    • SHA1

      b06749eb56f95bee643b1ecb1d0a1a23f243604e

    • SHA256

      00fb6f39e1e4492b42923d7461f6f6bb5d87fbd276c3a4fdc53d4a17395d640f

    • SHA512

      1790f767a28379a7742ea794bac67b3bc1d932782b36d375c91a5687602777f8c9276529946ad582ad85c384443ab3f7b74ff30deea5b020c167d40e4166e935

    • SSDEEP

      1536:4hZEtREC/rMcgEPJV+G57ThjEC0kzJP+V5Jq:2EzECTMpuDhjRVJGk

    Score
    3/10
    discovery
    behavioral12

    • Target

      SystemPropertiesProtection.exe

    • Size

      81KB

    • MD5

      858920b651188779353b3f5f7a4973cc

    • SHA1

      e02eba467cc5af2947d683af11acdb159333e8ec

    • SHA256

      0e6f456c72cca90f8c71ee714993743195d03d57eb5d58bada319ac2ac4c9be0

    • SHA512

      767a0cf137e653335694fc4a9f78ae5ea8bdd6acbe28f32730d682080654d27fecd77934130be6ad28b90313ee18582d08d278b6b510158e64870c5509834fff

    • SSDEEP

      1536:kraZGtREC/rMcgEPJV+G57ThjEC0kzJP+V5J3:koGzECTMpuDhjRVJG9

    Score
    3/10
    discovery
    behavioral13

    • Target

      sc.exe

    • Size

      63KB

    • MD5

      35afddbbf42372ff50809e87bbb88f0e

    • SHA1

      da70df7ef2f87bfedbea9fe53169b16e0cf4b12e

    • SHA256

      3ce81fa5051c945f70953a70d71be30708d7831b97a5c95070bf9972d6e9fce2

    • SHA512

      2e4f004cc31aa657bdd52914c5e5db797836c4d19095c2c5583fdeb6677524e64cd95ca5703b902b23fc13e1c3463ebc5247c61ef2b23913bf9bc10f4e52f6c9

    • SSDEEP

      1536:6FLaegG9/tuHVxWwzGCvopVcapqVUU8vn:6FLRgG9lYJGqopVcaUyU

    Score
    4/10
    discovery
    behavioral14

    • Target

      schtasks.exe

    • Size

      197KB

    • MD5

      f8564018f0382d7f6ec0515d38ad7966

    • SHA1

      3a8efd34e448b6e8905ddff2b49816c233927acd

    • SHA256

      f0024eb58326ecae6437237c3125ce75be6c621ea4b1303fd5b9dfe96b1dff32

    • SHA512

      17c5bc9417e6b1504b80201d65f1b2916f169f5712ac3293dd6e59f81775a1030b8d92850ef83990b7f2e5df17f34357a85fedb1fe07b15506ff06c3f042b388

    • SSDEEP

      3072:b+A4vHI+zUBKae4+0EYceDcBMG7QylmCccLbKfdSmAilNsZ7UBateHg:bko+zUoa2VK1ymCcoguZ7UeGg

    Score
    3/10
    discovery
    behavioral15

    • Target

      sdbinst.exe

    • Size

      158KB

    • MD5

      bcf992da012766860b0cebf29b111ab0

    • SHA1

      914654b2e630ff84c49bd7ca5064c30873515e8f

    • SHA256

      a4097be1fd80f56d3f13ca1337933305d712baaa0b22f7402a3617eb63d8fb04

    • SHA512

      ff9369bbecb846dbdf287fa4379129664b71a144cb5130848e49d7277a050d0ac1e4abca113c8d7dc4f880e54fc10a01ecda75a8119b6218e25bfd524919ff61

    • SSDEEP

      3072:g+PMD+ICzsdPDpbP9Tcpgpy5hzF/L3U8PhlYspLpgruWK6/t3Z+sV/VXCDmxRKqm:gTwjL3UKOjsoXxRKqQtP

    Score
    3/10
    discovery
    behavioral16

    • Target

      sdchange.exe

    • Size

      63KB

    • MD5

      39fefa7d479b167fb8452a6ef349ab60

    • SHA1

      562c39f67126b6a5474605d7eddcf14f16af142a

    • SHA256

      fb7708062528eb127d2ac839faa5a5933aa259dc3fcf051c8bfc6f79646df103

    • SHA512

      1c2751a5c417e45fe32983c23200765f8c9714227e221c4ce98dc356fa269efd49d86d3838504b7c300b16bc0ae1d8eb60dd7b9b3cd54f117f9a2bd58e5b4b55

    • SSDEEP

      1536:/g2+UwFbPPJeS6Vp01qe4qGiOtxs8oWsRi4Ga3:I2+lPPuVp8qe4HiCxDoWWXF

    Score
    3/10
    discovery
    behavioral17

    • Target

      sdiagnhost.exe

    • Size

      29KB

    • MD5

      c00e673ddff5d5c9915c9ed8aafb1fe5

    • SHA1

      4f8f8e1c802ec0b4617a39f004bf55a55b3c4363

    • SHA256

      b6fb97f1cb6b6424079102c0fda25d91b8666ccee6cf668f4f7336cae5a12359

    • SHA512

      7791c5a9c94ac56632503f504b48555c6b3a12496d07adbc633088cb40d123d89dd6424e26d5e301f2ea9f99f56b75323aad39b0928a9f9057e248c6c0ed230d

    • SSDEEP

      384:1RAKLsKmxaHm8MXATaK6csAABb9ZvrT0e8PI0Svuw/0AxR+NKZTqexaLeloWE7D+:1RAKLlUDK6h5vrTPCSvltZT9aLegy

    Score
    3/10
    discovery
    behavioral18

    • Target

      sethc.exe

    • Size

      99KB

    • MD5

      edfa536b8626fea822b0d3ff376b3071

    • SHA1

      641912ca690f9caf10dc1e1b98222a7ae5a75f65

    • SHA256

      acbd02dd60742f54068eeb714d4f58b30b5e1adfaacaac46b4e53ab6b947669e

    • SHA512

      2e718f45ffa3782a6471f2f7bd5fa7c2d8f80d1e6f817d3beeaa8d621fedfafafa34a489ee2ee64c3b6052723517956588eaa1c2598e47829b231c9db99106b4

    • SSDEEP

      3072:fDtPXZa3MIctuO6VPvpL1dij3uW2+StuwgHn:fDtc8ISSPvxIStuwgH

    Score
    3/10
    discoverypersistenceprivilege_escalation
    behavioral19

    • Target

      setup16.exe

    • Size

      26KB

    • MD5

      3a4dddfbfbd7ecb7624c6f7ff8e37214

    • SHA1

      18cb4fb8e6aef820066e9e6ab436e30c2b0af6b3

    • SHA256

      33a5815ce5254201a30571917e6e3a3d8e7e266bca8222f8801daea0c444273b

    • SHA512

      427cb4c95007221a2aeb4becea9e6b08050ce8025cb035e76cd8f1d92e9f382fa5252f8e25f9d3eb8f7d1ddd123ba3944c2e3ada449de128ea99fd10f4e4cad3

    • SSDEEP

      384:4eKbbrEeYmDRi1hW8tWV0nj3tMIyOrAGdI6e2grjlfGJvTsL42UVCoQaiFlWSpy7:Zq/YMw/2Iy0AqI6e2grgpYLOUak47s4

    Score
    3/10
    discovery
    behavioral20

    • Target

      setupugc.exe

    • Size

      122KB

    • MD5

      d5f6d5525cfba41fccb839463b8d34bb

    • SHA1

      2ee8ba971c9a731086067a83b2025164fe20cb02

    • SHA256

      61ecb31277086b4ab84cab00e3860745e9240cae91483f07f34b23ba4d443df5

    • SHA512

      dc6e685e9aa56c7a8e5970fe832dc3c5297ff344aefa126086a7bb1f15489eede72a2d8693b474b968d3d290c61ebe4f8c23540a78303ec0f73f4970fb1a6f85

    • SSDEEP

      1536:KebihsTTXjyuAS0/eoJbptmTYc2+RnPbd5HAu2GfHbShJQFQUDRu5LZ/:KKTTXaVbpYTYc22PB5H9W32QUtu5LZ

    Score
    4/10
    behavioral21

    • Target

      setx.exe

    • Size

      46KB

    • MD5

      60cf3ede6edb8c1afe8b9a339b409230

    • SHA1

      ea50fea77f58adf5daa7343ebe3533f37efba0d5

    • SHA256

      a641275f35c68faeb305ac1ae8dfd57e4776b5907fce9e3c43133195d200dbcb

    • SHA512

      864bc7e9a2bcf78295f89ee90174b4b042c3d3d3e29d4560189124095d3911834953f023bcdb193cf4c077cf85af622c14f43159059ea8aa2de8302a7e2374ed

    • SSDEEP

      768:emvk/wHrAsd1y4XU/lWfDHBUm/eT8IYY8TleJ2mP/GWhff6D5raXH1coa1lmd:Tvk/wLA5ArBVM8I+eJ95gWXH1Va1lm

    Score
    3/10
    discovery
    behavioral22

    • Target

      sfc.exe

    • Size

      66KB

    • MD5

      1e79369c723b599583c4e7ca003b4668

    • SHA1

      37d728823e5269a379b07040e13815ff7ce674e9

    • SHA256

      5d5875b7cdd66b481fb20473ed80cb173e185b240e5f9f1f46feb599117dcda7

    • SHA512

      1c137ec99be6a3f6bbdb80bee4851ec940fba88a16ada2c3c1030d4b23ca5552a97d5a9d98da5b88f59a47d6ecb0725c3e01dc39152edc392bd5470e12c92e48

    • SSDEEP

      1536:d//fYGOBUaHdpy22vp0qzvzY4qfV9ShLIJcDOh749Qlxz:57T4/apRvU4qfVchLnDOhuQvz

    Score
    3/10
    discovery
    behavioral23

    • Target

      shrpubw.exe

    • Size

      46KB

    • MD5

      e2f46d6d4fc087a12e2228b6ded36033

    • SHA1

      14cacc8c56dde44fe7306a1327094bf396ef4962

    • SHA256

      c7329ce3412bd26fc2f5e6e553a3e0723488ab9f5e8f05effc8fef557803471d

    • SHA512

      5c6b9ec539648b0e5733ea17ecd66ac7eea5dabb95a5c8067b30bcff5efdf566b2419f85ac97cc69cf26b0fd95a260a1281bf3e7979690080630e3de416f7e2f

    • SSDEEP

      768:hA5LxFRN3wD3kYuq3y0RtgcmT+EL1I/SAAJV8gSE+ZTr+J18yqv:i5LxFR67Buq3V+t+6iSzV8Lr+n8

    Score
    3/10
    discovery
    behavioral24

    • Target

      shutdown.exe

    • Size

      23KB

    • MD5

      5292bacbafa9add39381d90a4550b034

    • SHA1

      6573495784d328be89af1c9fd6f692b2f43715fe

    • SHA256

      85e3ece256c9473aa9661dd1de3fef69119e8044088ccd3fc555fe5c88193784

    • SHA512

      f8fe3a85537434ad15341b5a4373a56e6ae1314732be2c0a03c74687fff2307838a71e360c54cd7c1d8d1b6ccbf11e3a1c07d4c466b361acfd0cbd19932c076c

    • SSDEEP

      384:u7ws+IbTS+7usvUnU+eCZdhvYNg9eue+7PgMrptQfWV+SWw:u7pJOGus8J5ZdhANV+7Pjrptp+U

    Score
    3/10
    discovery
    behavioral25

    • Target

      sort.exe

    • Size

      22KB

    • MD5

      5236b2eee2955972e94535031d5d1e3f

    • SHA1

      f9b27176b27904696fb81af7668ab0b33f0479b6

    • SHA256

      523462bd0045f663faf282d4d8859fe8c9da8bcf00e01544bba52fc28ae5d368

    • SHA512

      2e7c0750d1d16e7e8fc1bf8ce0210f2b217f1b3458ff48aff19d1115c477b94545258ea2714442679e78b7a0164bbadd1a65368ad38f29eb759f4a6114ea159e

    • SSDEEP

      384:6Knnl2Sj5EPlbs8uwDxnFYvJG0qcPoG33fWcnWmZp:/TNeTnNFNMo0333

    Score
    1/10
    behavioral26

    • Target

      stordiag.exe

    • Size

      130KB

    • MD5

      b26ddbac20fcb88b0f62901d699f8434

    • SHA1

      2334d752b896622b8318c943d1befd86f46dfd83

    • SHA256

      895ff2b3d24df8376a15eac35855d83065e31e16b517ed662b45ca476ac374a8

    • SHA512

      75f8f8a9874876093fe01a8bb7a6766d50a0abda1f34a978e17f3913d0af751b8d4a5fe88d70f58c14fdefb00bd7d412f9df8f44f1c44b05d408fd7f2f1a48c1

    • SSDEEP

      3072:tlCrirx1l2QXUpXlPvteBTfZ6UHRwk42p0MftB+dMWd:ciozHPvteTfheM1odM

    Score
    1/10
    behavioral27

    • Target

      subst.exe

    • Size

      15KB

    • MD5

      5eaac0edfd618d8b6a2186f0e58cad7b

    • SHA1

      f2a670fd9d4686c163ea464c7b2deeada912983d

    • SHA256

      c4fa2fc0850e71e760e0770e0e8f0579a3a8007dc12e2aebc59351bc15e5728c

    • SHA512

      c3fd788fc382ef044bfe044c0072c8fba318e20b79a5169eda0aaaaefcabab5cd38fa4b90871f60fb8ce6059d5c06d96ec777ac8d267d294e4a11b016446cea3

    • SSDEEP

      192:7t0cdqf6m94EIwnU2DqWSabIAYghknMqkpWTGWx:J0cEf6m9sAAWSabIEhTpWTGWx

    Score
    3/10
    discovery
    behavioral28

    • Target

      svchost.exe

    • Size

      46KB

    • MD5

      b96d1c078a724e31b6f98cdb999e47f6

    • SHA1

      115878cfb730b1f2cb084cdc51fdd92e9b36f9a8

    • SHA256

      49fab89d62923d68d5f9627c68110ef522a668730598c3b09cd74fbe8f3f3e62

    • SHA512

      9e9fabadd90ae33b6aa8473ae3bfdcd1843a765c0fb5e1cc5fe693aff95f1e8b36c17bde8b5850e2f3a9b47fc565876f0bf94c633cb240ceb6cb30ef964d5173

    • SSDEEP

      768:ULNm/hN4d4Zzc9SHZUZS+0qw9Q7wSZpD6fRHfw3il5Q1PI5Yj/9zzu:VpN4d4Zzc9710LAwSZh6fRH4OiPzZzq

    Score
    1/10
    behavioral29

    • Target

      sxstrace.exe

    • Size

      33KB

    • MD5

      a0c365e9d4eeb1814fb825e7da20f001

    • SHA1

      ea557df8aa5151522695b666b1c4867881710040

    • SHA256

      f1d698d6d1b4451a08f36927651070aa46ff3c16d5c25ca185fd3be154c700f4

    • SHA512

      376e792b9ac50b350607690a0b18a56b2092d4b29e74c7812540c9d7258cfacb9e5026dbe665fe605856e30ecd938ae0d2e1fbd9bc3aa5353c84de04660da3a3

    • SSDEEP

      768:9TllUQSfAdyyDNngX0L/9j0a+jHGw3MP7kwGzTr:Zl+VfAhNngX0r9T+rGie7kwOT

    Score
    3/10
    discovery
    behavioral30

    • Target

      systeminfo.exe

    • Size

      77KB

    • MD5

      d324285a698b32cd87cfd553abd92451

    • SHA1

      86e07f3232669d8c3f36c46c022b5f439b7c7028

    • SHA256

      0cd1abc5fee9ee465af0eaba7c48e29dbd3fc6839f386e73d622425d846295df

    • SHA512

      7c7eae87b106ae7503ff4a42a3be0e92a982b39a5c42d09b081754b7b83184a4ba2bcd46b3defdb4ea967d0f4ec59988f8cb51a393904706b57c0c971e769a82

    • SSDEEP

      1536:4HJi8F36DH1MbRUX3JunyOAWKmMKcS98kiitQNf8JxEdG3Hn:cWH2CHJunyOAWMKcSTrA8Jxt3H

    Score
    3/10
    discovery
    behavioral31

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

discovery
Score
3/10

behavioral2

Score
1/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

Score
1/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
4/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discoverypersistenceprivilege_escalation
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

Score
4/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

discovery
Score
3/10

behavioral29

Score
1/10

behavioral30

discovery
Score
3/10

behavioral31

discovery
Score
3/10