General

  • Target
    ZoomForCourts.scpt
  • Size 6KB
  • Sample260602-phnvzaes3q
  • SHA256 e78ee8e3efb2f35a8fb7e84bdba88c4d4ff3ae1d972f90baab86c498dd90e487
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      ZoomForCourts.scpt
    • Size 6KB
    • SHA256 e78ee8e3efb2f35a8fb7e84bdba88c4d4ff3ae1d972f90baab86c498dd90e487
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Exfiltration Over Alternative Protocol

      Adversaries may steal data by exfiltrating it over an un-encrypted network protocol other than that of the existing command and control channel.

    • File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer) may leave traces to indicate to what was done within a network and how. Removal of these files can occur.

MITRE ATT&CK Enterprise v16

Tasks