Overview

overview

10

Static

static

6

Documentaz...ht.zip

windows11-21h2-x64

10

Resubmissions

21-11-2024 15:48

241121-s8wv2sxpgr 10

21-11-2024 15:46

241121-s7pqcatkcx 6

21-11-2024 15:36

241121-s2barstjgv 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Documentazione per monitorare la violazione del copyright.zip

  • Size

    156.6MB

  • Sample

    241121-s8wv2sxpgr

  • MD5

    9cdfa7ac2837ce2da978f588d5191566

  • SHA1

    d1b9e0a767ceac5d210b2c009d7b4a06ca0aff6f

  • SHA256

    b24f27751c89eea68e10c983ceea31369d24e6e12e87d29afd893beeffa95e7e

  • SHA512

    d4158b05173beaff62c6b6a0c926a07a13ba5151dbcd698a04b2a13cbd73556cfda3191fcdd41c26b1c663b379c27e1a0e5bc59d449e95a48cb2facb9a0c23ac

  • SSDEEP

    3145728:haUzI7PHmFJiW4Ls9zIVsgrTAWvgGNQ3PEoWBqKOoTJtZFijjdd43r8J5zE0tV7I:hBFJiBA938zBOa6jJd43rK5zRV73I/

Score
10/10
discoveryevasionpdfpersistence

Malware Config

Targets

    • Target

      Documentazione per monitorare la violazione del copyright.zip

    • Size

      156.6MB

    • MD5

      9cdfa7ac2837ce2da978f588d5191566

    • SHA1

      d1b9e0a767ceac5d210b2c009d7b4a06ca0aff6f

    • SHA256

      b24f27751c89eea68e10c983ceea31369d24e6e12e87d29afd893beeffa95e7e

    • SHA512

      d4158b05173beaff62c6b6a0c926a07a13ba5151dbcd698a04b2a13cbd73556cfda3191fcdd41c26b1c663b379c27e1a0e5bc59d449e95a48cb2facb9a0c23ac

    • SSDEEP

      3145728:haUzI7PHmFJiW4Ls9zIVsgrTAWvgGNQ3PEoWBqKOoTJtZFijjdd43r8J5zE0tV7I:hBFJiBA938zBOa6jJd43rK5zRV73I/

    Score
    10/10
    discoverypersistence

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks