efb6cfdb6380457242770c0907bba1bf6006554b17f63d92eb25395bdfc47a3c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

script.ps1
Size

631B
Sample

241004-s9ctkasfnq
MD5

c353867bcf270fc4006bad99c414f569
SHA1

f42825eb6e03c8c4399e45ab4e8034954120fee1
SHA256

efb6cfdb6380457242770c0907bba1bf6006554b17f63d92eb25395bdfc47a3c
SHA512

95ebff1ff1e2946028e4e96d61d1a548a595ff435c2c2218310f5f8cfd357896ba7bb581ca9fc690104f818a96a2feba593943a230b0352d739cbec83dce681b

Score

10^/10

defense_evasion discovery evasion execution trojan

Malware Config

Targets

- Target
  
  script.ps1
- Size
  
  631B
- MD5
  
  c353867bcf270fc4006bad99c414f569
- SHA1
  
  f42825eb6e03c8c4399e45ab4e8034954120fee1
- SHA256
  
  efb6cfdb6380457242770c0907bba1bf6006554b17f63d92eb25395bdfc47a3c
- SHA512
  
  95ebff1ff1e2946028e4e96d61d1a548a595ff435c2c2218310f5f8cfd357896ba7bb581ca9fc690104f818a96a2feba593943a230b0352d739cbec83dce681b
Score

10^/10

defense_evasion discovery evasion execution trojan
- UAC bypass
  evasion trojan
- Executes dropped EXE
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Subvert Trust Controls

SIP and Trust Provider Hijacking

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryevasionexecutiontrojan