Overview

overview

10

Static

static

1

ckJTQEOKC/...PH.vbs

windows7-x64

1

ckJTQEOKC/...PH.vbs

windows10-2004-x64

1

ckJTQEOKC/...PH.ps1

windows7-x64

10

ckJTQEOKC/...PH.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ckJTQEOKC.zip

  • Size

    20KB

  • Sample

    241129-m3xx9s1qe1

  • MD5

    a8fd65d74a9739b23c7e364df251b4e5

  • SHA1

    fe8d2606f65a2cf08213786576ecfb20e4e6eba3

  • SHA256

    32f821e84b91cdd2e998be739eb5b9d2e435827b4be84c54be34ce44a6e2ec31

  • SHA512

    27632f81f83491ca628b0210a9eb28bbbda30a718596eb8e216417f8467e971d9bdc6ede3af7163ea5524fc780722b5e1d3eb6fa4eb69c9284789b7d13727ac4

  • SSDEEP

    384:CuInQrtM9vrxKnB4AvyszfOiSr+p51d74AwsN3V/oQkUYP4ZqkqTZNLFzNF:ung8jEOAtOtw5v8ATJVFny4zqTZtFzP

Score
10/10
dropperexecution

Malware Config

Targets

    • Target

      ckJTQEOKC/WdxzhJPH.lite

    • Size

      874B

    • MD5

      c63ba33fb5afa2b84f98355c5acaea1c

    • SHA1

      3ae2b38ea5a41352c11f70f676d78ad8b129101a

    • SHA256

      de0f8fb2de75f6ed3645ed8b36bf947ccbbe834adfcc4eff7740ec5f857a18b8

    • SHA512

      e0d63e8d562086c8a04273dfd7c969a70d796ef412f282b61c6320c404e58bfa213a84b56e6f4af56daae83bdfc680c00d537a6a7ead16132cb7dfbfcbeb7a13

    Score
    1/10
    behavioral1behavioral2

    • Target

      ckJTQEOKC/WdxzhJPH.ps1

    • Size

      2KB

    • MD5

      9d6d8a084805bbf5d22507780d14e8f4

    • SHA1

      27ebc6c5948855d6b5a7f1c5422a3be6a4a1e77a

    • SHA256

      9092a282a5c56c0a19713fd3067b528efae5b27e9faa737c87a9bbf6a566cc5e

    • SHA512

      a8142d16469fb415ad3f9212d52f0aadde797876e7735f3faebd79b57acd04688726e83047c808851ea9394b14dca0dad8c33a1e7695c4ce2a768d46a2f3597b

    Score
    10/10
    dropperexecution

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Download via BitsAdmin

      dropper
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks