14aa22db356f6a5328c08fb4c3c59bfebfb07b1de54dc41a6a8b71c01cbdd999 | Triage

Sharing

General

Target

b64_akam_kent_2708.ps1
Size

7KB
Sample

240920-d9rv6awhja
MD5

c425e23bb0e53f62eddc405abd38ea56
SHA1

96726a404abbe9a00561173544fd13d2ada3e07a
SHA256

14aa22db356f6a5328c08fb4c3c59bfebfb07b1de54dc41a6a8b71c01cbdd999
SHA512

3dc6b50af2bc5284f44b366d2427931fc219b71243b3a36f39fa8537560873fd7ed734b2654b8593b7a8bea673dc42303042e84cd1f55df129859bdebe8961a3
SSDEEP

192:auL4HV/9SoNWHX5EV7rHSdeR+N3JbsSU7Fcn2G:2HV/9S1HA7rqeR+NJsP5DG

Score

10^/10

execution persistence

Malware Config

Extracted

Language

ps1

Source

URLs

exe.dropper

https://calbyiris.com/fvz/f2v.zip

exe.dropper

https://calbyiris.com/fvz/f1v.zip

exe.dropper

https://calbyiris.com/fvz/f3v.zip

exe.dropper

https://calbyiris.com/fvz/f4v.zip

exe.dropper

https://calbyiris.com/fvf/

Targets

- Target
  
  b64_akam_kent_2708.ps1
- Size
  
  7KB
- MD5
  
  c425e23bb0e53f62eddc405abd38ea56
- SHA1
  
  96726a404abbe9a00561173544fd13d2ada3e07a
- SHA256
  
  14aa22db356f6a5328c08fb4c3c59bfebfb07b1de54dc41a6a8b71c01cbdd999
- SHA512
  
  3dc6b50af2bc5284f44b366d2427931fc219b71243b3a36f39fa8537560873fd7ed734b2654b8593b7a8bea673dc42303042e84cd1f55df129859bdebe8961a3
- SSDEEP
  
  192:auL4HV/9SoNWHX5EV7rHSdeR+N3JbsSU7Fcn2G:2HV/9S1HA7rqeR+NJsP5DG
Score

10^/10

execution persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

executionpersistence