Overview

overview

10

Static

static

1

ckJTQEOKC\...PH.vbs

windows7-x64

1

ckJTQEOKC\...PH.vbs

windows10-2004-x64

1

ckJTQEOKC\...PH.ps1

windows7-x64

10

ckJTQEOKC\...PH.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ckJTQEOKC_28_11_2024.zip.7z

  • Size

    27KB

  • Sample

    241128-1lyecs1rcy

  • MD5

    28392dc4be3ecbc57953c605981affdc

  • SHA1

    fa897706e7e4ade0d35a3e2f6d0637c897fef777

  • SHA256

    2da77359f85bbc09c5ea5a4dd2f768e16079bbff9ae22a7cf84e4411bd65d1cb

  • SHA512

    e519bff9d5f41e519dba9e0d31dbc020f0b61b2157533becf8ee0508577a31f8fa6075e7f7d41566346751578a7a32967a62ad166da9cf47c1383bd943cc2a69

  • SSDEEP

    768:wqRsZXvxy2Wwbmqd1hBv4yUevPXp+9NaP996:wqRs5FWwbmq3bZPXp+9N

Score
10/10
dropperexecution

Malware Config

Targets

    • Target

      ckJTQEOKC\WdxzhJPH.lite

    • Size

      876B

    • MD5

      fd4e455ea3f14f99f5f9b66b4e0ef6d9

    • SHA1

      001bf670b7c829cb9d0ffb82a13ff2a65b1cb969

    • SHA256

      1cc49c3a3e3d7af8deea30253f7f0b2486b6de8f51c7ab1b420b22f5918005fc

    • SHA512

      f9b228ce9358013b92db3803fc6c81d7badf3917d7814d36ee43885b548558c1fbb3e4658d6f2ce752331d51d79898060071d475617810b3103eec8f85320d3b

    Score
    1/10
    behavioral1behavioral2

    • Target

      ckJTQEOKC\WdxzhJPH.ps1

    • Size

      2KB

    • MD5

      9d6d8a084805bbf5d22507780d14e8f4

    • SHA1

      27ebc6c5948855d6b5a7f1c5422a3be6a4a1e77a

    • SHA256

      9092a282a5c56c0a19713fd3067b528efae5b27e9faa737c87a9bbf6a566cc5e

    • SHA512

      a8142d16469fb415ad3f9212d52f0aadde797876e7735f3faebd79b57acd04688726e83047c808851ea9394b14dca0dad8c33a1e7695c4ce2a768d46a2f3597b

    Score
    10/10
    dropperexecution

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Download via BitsAdmin

      dropper
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks