5f208a8faab1460c0243e850fa6bec28a15bb1fa9a63b8611b0c42b1ef0a9555 | Triage

Sharing

General

Target

5f208a8faab1460c0243e850fa6bec28a15bb1fa9a63b8611b0c42b1ef0a9555.exe
Size

1.0MB
Sample

241121-mb55kasakm
MD5

f9b0a0ed6eed1387ccd0922b08d3d923
SHA1

20549d8d3360b7508002b8a0d5ad64887aed25ca
SHA256

5f208a8faab1460c0243e850fa6bec28a15bb1fa9a63b8611b0c42b1ef0a9555
SHA512

581540a6246d8f9388766601a7a4a74a7f7810c2838fd01b3413e07140da860595872a68cfd25e1bf057ea4977fcc25abf6acd8183fdba81f3e496efc07e2a7e
SSDEEP

24576:lrORE29TTVx8aBRd1h1orq+GWE0Jc5bDTj1Vyv9TvatZ+:l2EYTb8atv1orq+pEiSDTj1VyvBats

Score

8^/10

execution

Malware Config

Targets

- Target
  
  5f208a8faab1460c0243e850fa6bec28a15bb1fa9a63b8611b0c42b1ef0a9555.exe
- Size
  
  1.0MB
- MD5
  
  f9b0a0ed6eed1387ccd0922b08d3d923
- SHA1
  
  20549d8d3360b7508002b8a0d5ad64887aed25ca
- SHA256
  
  5f208a8faab1460c0243e850fa6bec28a15bb1fa9a63b8611b0c42b1ef0a9555
- SHA512
  
  581540a6246d8f9388766601a7a4a74a7f7810c2838fd01b3413e07140da860595872a68cfd25e1bf057ea4977fcc25abf6acd8183fdba81f3e496efc07e2a7e
- SSDEEP
  
  24576:lrORE29TTVx8aBRd1h1orq+GWE0Jc5bDTj1Vyv9TvatZ+:l2EYTb8atv1orq+pEiSDTj1VyvBats
Score

8^/10

execution
- Blocklisted process makes network request
- Command and Scripting Interpreter: PowerShell
  Powershell Invoke Web Request.
  execution
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2