f0433b12bd4a308e2a3793dc9c6414f6e2eb03e1552f9baf8e6b188a8bc5aa55 | Triage

Sharing

General

Target

f0433b12bd4a308e2a3793dc9c6414f6e2eb03e1552f9baf8e6b188a8bc5aa55.exe
Size

90KB
Sample

241002-kybs5axgkr
MD5

4c266d1ce04141eed968af837759f535
SHA1

09bd94b19b1111469b193391378178b44bd647d8
SHA256

f0433b12bd4a308e2a3793dc9c6414f6e2eb03e1552f9baf8e6b188a8bc5aa55
SHA512

cd650036808027ebcc490fb5257a578dc4df848312744bebc1350a1f33cda6178213172a8ad4eae6baa56800eeb7ccbfb32bb13faedc3fcd141c06d558a4eb77
SSDEEP

1536:u7BIDRvXmB/FfMY71myIndRj5NMY8t63pjH:Oi6FZ1jInxNMb2j

Score

8^/10

execution

Malware Config

Targets

- Target
  
  f0433b12bd4a308e2a3793dc9c6414f6e2eb03e1552f9baf8e6b188a8bc5aa55.exe
- Size
  
  90KB
- MD5
  
  4c266d1ce04141eed968af837759f535
- SHA1
  
  09bd94b19b1111469b193391378178b44bd647d8
- SHA256
  
  f0433b12bd4a308e2a3793dc9c6414f6e2eb03e1552f9baf8e6b188a8bc5aa55
- SHA512
  
  cd650036808027ebcc490fb5257a578dc4df848312744bebc1350a1f33cda6178213172a8ad4eae6baa56800eeb7ccbfb32bb13faedc3fcd141c06d558a4eb77
- SSDEEP
  
  1536:u7BIDRvXmB/FfMY71myIndRj5NMY8t63pjH:Oi6FZ1jInxNMb2j
Score

8^/10

execution
- Blocklisted process makes network request
- Command and Scripting Interpreter: PowerShell
  Powershell Invoke Web Request.
  execution
- Drops startup file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2