General

  • Target

    Activation.exe

  • Size

    703KB

  • Sample

    241126-zpf4tawjcn

  • MD5

    8c1d40db6464fd098716a317486db961

  • SHA1

    4b4d82e0a91f11e1348488b9e9edd43697d9db67

  • SHA256

    7b9723c3ca58ecdde9af2dd2215e00fa7c7692e960242d9c6b2e80ab45fc90d5

  • SHA512

    16c868e227c4928dfcc116ba6e9d93c22418936cad625cd48645abb96229d31ee1329105097d2e7f36f6382e214dfd54e1eb92842bcc45edd978f64da6c4c6dd

  • SSDEEP

    6144:5UPAUV624Zk+nC+f8Z7DgMvVXYNlV8F/2/6utZeiXhOy8oMmkCOutH5BysohXWwm:5mV620nN8ZoAutZeiXhOBuOaBToo4ZY

Malware Config

Targets

    • Target

      Activation.exe

    • Size

      703KB

    • MD5

      8c1d40db6464fd098716a317486db961

    • SHA1

      4b4d82e0a91f11e1348488b9e9edd43697d9db67

    • SHA256

      7b9723c3ca58ecdde9af2dd2215e00fa7c7692e960242d9c6b2e80ab45fc90d5

    • SHA512

      16c868e227c4928dfcc116ba6e9d93c22418936cad625cd48645abb96229d31ee1329105097d2e7f36f6382e214dfd54e1eb92842bcc45edd978f64da6c4c6dd

    • SSDEEP

      6144:5UPAUV624Zk+nC+f8Z7DgMvVXYNlV8F/2/6utZeiXhOy8oMmkCOutH5BysohXWwm:5mV620nN8ZoAutZeiXhOBuOaBToo4ZY

    • Possible privilege escalation attempt

    • Modifies file permissions

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

MITRE ATT&CK Enterprise v15

Tasks