8723b97b8e4ede3b5b7fd0ba129edfbc113a4db329609f0eaffe24e6a37e019e

Sharing

Copy URL Twitter E-mail

General

Target
wushowhide.diagcab
Size 47KB
Sample260622-lt52vaay4j
SHA256 8723b97b8e4ede3b5b7fd0ba129edfbc113a4db329609f0eaffe24e6a37e019e
MD5 8509b9cb62eb87580f39809f75f5b7e7
SHA1 7e2a669e3542303c275d32cf2bd1d4922b1ab204
SHA512 b6d191a7b5dd77bf416942e9c6f61aef8c68ce1076b84fb3937443f572572a65afc0750d057fa98793629016d9316d23e641689607662aad6ac8940b686a982d
SSDEEP 768:0i0u1qWxXPO3e9O71BtGo7dbN57d1bsAK47Z0z7TNk4Klj8kFgPda3ZFMsg1by57:n723N7PtNRPHbsPUZ+kjRbZFk1q7f
TLSH
T14523D0D1C9C8A541AB76A8444280EDCF7E3CDBCB145080E219ACE6B51CD77C7B71AEB9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Targets

- Target
  CL_Windows_HU.ps1
- Size 10KB
- SHA256 5de59a34e91d89604f980f0d2db1fcdecc2946fbb04800c3de036bfb39069f38
- MD5 7dc3bac318038dc2c7010dc09a0fa1f4
- SHA1 23e0fab091797b74c0290cc4e4e917b7974417db
- SHA512 e2827430f271f7a2ae3633f2e5ac1ac606b90188335f3ed730cb73e0bcacd421c23198b4a343a53193c62ec21ef6a0afa02efac5fb1d5cabed0188d507cafd82
- SSDEEP 192:1qnZAomckYTgaQwHx7cprxi8RZkeuYT1bLKRoguwCsXsoz+ppjGAwhXCZNehWi2a:ssckYTgPU7Mrw8Rme/T1bOw7gs3zz0Xf
- TLSH
  T1BA227DFE0F50B2CC1977DC14D47E6A225818DE924DD56264AD5CB8264A30F26A7C3CCB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1
- Target
  DiagPackage.dll
- Size 44KB
- SHA256 722e97913a28926b41d9b8c0fa48f13d32facb410ca5d113a3b11de4662df5cd
- MD5 74276ee1b9d304b76afc8783de67934b
- SHA1 f879d5eddfdb43891e512fb21928ba404e984675
- SHA512 4588faa9f2c6f943be108c3a18707a684669889c4071e6be5375bcf75b7ecaa50fcebf99b53101819da5635058b6c945cc194732c2f93b0571d90266e1f6ecee
- SSDEEP 768:jl77eqOJn762q3qmaTqqTq+igqg/Eis7Z+Ex5q7qa+0F+D7qQb77eqOJn762q3qw:jl77eqen7Zq3qmaTqqTxigqiEis7IExl
- TLSH
  T1AE138B863094C7CEF5E72DF9F1D06FB384783D864D68410795613E1F3BEB062A8A9299
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  RC_HideUpdates.ps1
- Size 10KB
- SHA256 e1d570cf1000fc292a9f0d59d09f27e357f8997fff789bb7380efe2a21e94689
- MD5 625cc137d100d00c338931dd71a775be
- SHA1 30c97a655006f695e0f95722026f0fe4deff70ad
- SHA512 a35220a81d07f30a5263994b41032da9ea72cdf36745fa8b90654a6a9a506aa6768cb0fd77c530074b7ed8d6051634a76f8d9d7cdff2ed1010ec2c59b83c7834
- SSDEEP 192:6aiMkXJOXiomckYTgaQwHx7cprxi8RZkeuYT1bLKRoguwCsXsoz+ppjGXwxmamYw:6w+JPckYTgPU7Mrw8Rme/T1bOw7gs3ze
- TLSH
  T140226BFA0F10328C1A7BFC14C07D265698199A928DE977989D2C78354A24F35BBD7CCB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  RC_UnHideUpdates.ps1
- Size 10KB
- SHA256 b7cfdf2a615e2c9789151408ee05553ba2711075ddbcc4336c435ee56ba77117
- MD5 c77dede606fb519000b7e4e941eae9f9
- SHA1 c3502d29f8de239cedcc93a80ab668a5e84676f7
- SHA512 761ec877667269ccf9ce3738d97e2cc98356531fcb508539cddfe6b6ff53f5198e12ebb033135e90750e83c2fbf559cb701d49dfb6cb3b55e7eee8d9f80c2948
- SSDEEP 192:vai9kTQfv40YkYVgltQwHx7cprxi8RZkeuYT1bLKRoguwCsXsoz+ppjGXwy9h2uz:vBaQLYkYU6U7Mrw8Rme/T1bOw7gs3zwD
- TLSH
  T1EE227DFE0E1032CC2A77FC14C1BE5616AC1D9A9249D927ACE85878394524F35ABD7CCB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  RS_HideUpdates.ps1
- Size 10KB
- SHA256 81fc4d059e04aaafa0c1b0953227e272f02375c2e6d29080147aedffb798d562
- MD5 c9aee11e9ee749f463171c6722e1daae
- SHA1 af13d6a979ae991252a0d35d2c339aa8fd27afa9
- SHA512 4990da2e52fe4f26bccfc434a0ae906702ae2d70f622bc87521b248a31c22b19e4ea39366de3eb558e39aace2e68fec9663a91258b6416d002ab816ff8c7751c
- SSDEEP 192:5Xa/WnUkRGK0YkYVgltQwHx7cprxi8RZkeuYT1bLKRoguwCsXsoz+ppjGXwKKYyD:hHLWYkYU6U7Mrw8Rme/T1bOw7gs3zoJS
- TLSH
  T1CC226EBA1F1471CC2A37DC10C07E66266D1D5E5249E263A8EC58B836C934F2AD7D6CCB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  RS_UnHideUpdates.ps1
- Size 10KB
- SHA256 61da5cb4f8b869b7f029a73fe3d3928f41283bfcd85afb6d4c7b33da4689ffeb
- MD5 8baa83acd47eeaf627ef80e84ecb0fc5
- SHA1 382fe8a7ca74ab8c6acd361bc6b201dd75431956
- SHA512 ef7e4ec441caa735721d0567d3e1ac93155b3db258938dd57e9760e7cdfbab38e6dec3e9d033703823968fd6a9224e735ffde3f6e402c5e2e90a803bf6d8e53e
- SSDEEP 192:gm94WYFm+p0YkYVgltQwHx7cprxi8RZkeuYT1bLKRoguwCsXsoz+ppjGXwShgCbv:XzWmYkYU6U7Mrw8Rme/T1bOw7gs3zwRF
- TLSH
  T1CC225DFA0F1472CC1977DC10D07E6715AC1D5A524DE226A8ED187C368A70B2A9BD7CCB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  TS_Main.ps1
- Size 10KB
- SHA256 b1a5987b971234dd9ec7c7a9a1c0bd80b16749eb942788d30c6cf93649106cbd
- MD5 180f2a43f779a2b7910fd74f9531c24f
- SHA1 e9e2ff17f19376ece6ae07ac220f72343ce586da
- SHA512 e9b69d8d61c3d4ad708adf5a236582dc27fd74a1c319275567f912384b68508c743fa8387f10db6c16b3dcd43f157e7f7f45a928925da0049acbec56f26abf5f
- SSDEEP 192:crDyYg+trm8omckYTgaQwHx7cprxi8RZkeuYT1bLKRoguwCsXsoz+ppjGLwwGfFM:crDBckYTgPU7Mrw8Rme/T1bOw7gs3zcR
- TLSH
  T1DD326DFE0E1071CD2A77ED14D07E66125C286ED34EF16758D95878258A20F26ABE3CCB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  VF_HideUpdates.ps1
- Size 10KB
- SHA256 9f9a2c57ed246a97bf6e5343a954320a9d29e747baf3931d913f8063745ed18d
- MD5 6ca6f79af6de4400df53b46974da6fe1
- SHA1 ba1227db804f5786ff052aeb499edef7e127cc8a
- SHA512 91c2ab6421e6169ab52b5f05d73a5de773ad9b08709c709891e45a7541f1c21ae5fd7a312709b53e909bdfff89cfeac5aa04b3e5367c13bc6b7e87dafe3341b2
- SSDEEP 192:iPRxRVSomckYTgaQwHx7cprxi8RZkeuYT1bLKRoguwCsXsoz+ppjGXwMmxk3f:i0ckYTgPU7Mrw8Rme/T1bOw7gs3zov1
- TLSH
  T1FA225CFA0F5476CC1A7BFC10C47D6A5568199A818DE523989D1C7836CA30F21FAD6CC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  VF_UnHideUpdates.ps1
- Size 10KB
- SHA256 30e90b6a2b0f50a56f28d0c419d23084fa0ed866fc317126f963484e2ebb3587
- MD5 94044d51c7d5e4ddcfbe8e45644e0f5e
- SHA1 e495e1d1c36ab32f7fce69d3f517673191c7b521
- SHA512 81614db26350f56d14c1d0523e6efc2d1733ec4a0699497b7271147ec87781f2133d127fa0a9961ab837c08f17f18f13de234c20498b72b4bc91884654d2bb45
- SSDEEP 192:i0R6RdmYomckYTgaQwHx7cprxi8RZkeuYT1bLKRoguwCsXsoz+ppjGXwshd5qhCd:iSCckYTgPU7Mrw8Rme/T1bOw7gs3zwz9
- TLSH
  T19E226CFA0E4472CC0A7BEC20D47E66527C29DA914CD4639C9A2C78258674F21EBD2CCB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9