Resubmissions

01-10-2024 18:18

241001-wx32rsxdna 8

01-10-2024 18:17

241001-ww6q9stell 3

General

  • Target

    Activation.rar

  • Size

    173KB

  • Sample

    241001-wx32rsxdna

  • MD5

    5b3fcba0ff0e60fa408058c8e80ec28f

  • SHA1

    8924b0d24a820916b94ec6335bf245bff9b7b0f6

  • SHA256

    1e040bb7993a217892c0323ace2595b731e32ca2ef28330b68d3b8a6686a5913

  • SHA512

    9e675493bc52d01e4c9fbde41bd119f44875dec8168ffc9e77fd206abc8a20a329f8c8f22df8c1686db54b4f1c57693c523cd10bc3d6e2408e8c0e66cff07b7b

  • SSDEEP

    3072:54SeI7XXc8BK09zxtbO8DIKmOrLdn2tzTR9C/1PMSyFd6lzR2i8YuxT1f4:5XXc8BHdO88O3RM/W/6R8b/8txT1w

Malware Config

Targets

    • Target

      Activation.exe

    • Size

      703KB

    • MD5

      8c1d40db6464fd098716a317486db961

    • SHA1

      4b4d82e0a91f11e1348488b9e9edd43697d9db67

    • SHA256

      7b9723c3ca58ecdde9af2dd2215e00fa7c7692e960242d9c6b2e80ab45fc90d5

    • SHA512

      16c868e227c4928dfcc116ba6e9d93c22418936cad625cd48645abb96229d31ee1329105097d2e7f36f6382e214dfd54e1eb92842bcc45edd978f64da6c4c6dd

    • SSDEEP

      6144:5UPAUV624Zk+nC+f8Z7DgMvVXYNlV8F/2/6utZeiXhOy8oMmkCOutH5BysohXWwm:5mV620nN8ZoAutZeiXhOBuOaBToo4ZY

    • Possible privilege escalation attempt

    • Modifies file permissions

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

MITRE ATT&CK Enterprise v15

Tasks