Overview

overview

10

Static

static

6

Documentaz...ht.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Documentazione per monitorare la violazione del copyright.zip

  • Size

    156.6MB

  • Sample

    241121-sxrf7atjev

  • MD5

    9cdfa7ac2837ce2da978f588d5191566

  • SHA1

    d1b9e0a767ceac5d210b2c009d7b4a06ca0aff6f

  • SHA256

    b24f27751c89eea68e10c983ceea31369d24e6e12e87d29afd893beeffa95e7e

  • SHA512

    d4158b05173beaff62c6b6a0c926a07a13ba5151dbcd698a04b2a13cbd73556cfda3191fcdd41c26b1c663b379c27e1a0e5bc59d449e95a48cb2facb9a0c23ac

  • SSDEEP

    3145728:haUzI7PHmFJiW4Ls9zIVsgrTAWvgGNQ3PEoWBqKOoTJtZFijjdd43r8J5zE0tV7I:hBFJiBA938zBOa6jJd43rK5zRV73I/

Score
10/10
discoveryevasionpdfpersistence

Malware Config

Targets

    • Target

      Documentazione per monitorare la violazione del copyright.exe

    • Size

      6.1MB

    • MD5

      4864a55cff27f686023456a22371e790

    • SHA1

      6ed30c0371fe167d38411bfa6d720fcdcacc4f4c

    • SHA256

      08c7fb6067acc8ac207d28ab616c9ea5bc0d394956455d6a3eecb73f8010f7a2

    • SHA512

      4bd3a16435cca6ce7a7aa829eb967619a8b7c02598474e634442cffc55935870d54d844a04496bf9c7e8c29c40fae59ac6eb39c8550c091d06a28211491d0bfb

    • SSDEEP

      98304:VZQIM+/nv/CDoAkYwpAa5ge1zZ/jtdZwUkQ:bJCKlA2VKUz

    Score
    10/10
    discoverypersistence

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks