f58e54440cd9a71020e9f8900635fc4a66f506f753c0dfb42b834fbe44d2757a

General

Target
Screening-Resume-A-v2.9.zip
Size 527KB
Sample260622-ry3eeads6q
SHA256 f58e54440cd9a71020e9f8900635fc4a66f506f753c0dfb42b834fbe44d2757a
MD5 77db54f98ef9f496b75264e775bc9e5e
SHA1 406d5133c38739deec2c70e4c95bd51320bc4e47
SHA512 24665695d9976beda7eab20713f61e450d9721a093bffdcbd834964e3e855f33bfeb9a29a83e4e790ccb5a9597be197266797aded927906915dacb24735d1045
SSDEEP 12288:/vOi3UDYXndLQ/jJOjB89RitlR0XjuIkVp69d3iY829uhB3bY7vPpCkIf:/WiEGnlQ/jwyil0X7kWv3icY3b9X
TLSH
T1FEB4230A85D01FFF899ECB9946D4A4672FF427952F93565BC0CE20700AEA203D6EFC25
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

execution

Malware Config

Targets

- Target
  Application.bat
- Size 23B
- SHA256 573578fb3b97321829b7adf2425b9bab6736c50f71d224947383ed66e7a750c2
- MD5 08ebf8e3d17c087093fbe53714bdf5c8
- SHA1 0f0be9893d46f3021d09ede2bf766ed541b23261
- SHA512 a58c994f47b1f8cb39bbea870724b25bacfe6fe0f65a4370049f13d834ee0cb9098973363a317d03a92ea750c507e4ed0a891bd4e3a874f361058a76dd782ea4
- MD5 SHA1 SHA512
Score

6^/10
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2
- Target
  boot.exe
- Size 753KB
- SHA256 d56ad8a35da042cc758b125d56ba34b217150653830f39ee47667fedef3da769
- MD5 4c042bf1c7236a12c8b2d7ddb4049d9d
- SHA1 8b14e63685ac2608a7ba8f8c9cc08a98e09c8ccd
- SHA512 5ee4098886b0f88525545e11f173665de825608e4cea0807150e55f7a1b81d92b13eb29352b5e66ee52c84ba940e20ec32edbd2969abd58a6821935d3b5b47ca
- SSDEEP 12288:hIxb6mgscIPv+xPBPx3ph7WfsnE6VTdUZ9nUt2ZvIX/19X7Bro0kLwqG:WlRcIOXrh7dEiTWZC8gXTFY
- TLSH
  T18BF49F19FBB101FAD5B78135CD16A90BEBB2BC050624566F43E06AAB6F377210E1F325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  logo.txt
- Size 289KB
- SHA256 677a25b173119ba015f055d41a7e221c7ae8cc290770f44050a8857e8acab6ab
- MD5 e681cd6f86c2ca59d64dbe10b8c319b8
- SHA1 a9d694b3f2cfc81187c967a7901f9d6c899983e2
- SHA512 df56215581dc52902f19268375c856501bf1cdbe148d0b66db1ac3bbc5919e54e8f9c8803892bd97dd97344d7095f379c6983474f1d6944a8eebd87ef3fcb3e7
- SSDEEP 3072:NhLASwcVyWBCYR+DQACa7bPqeXtxSw0I0QzpM2JjbxwQZz90+JBC+3SeKqZssJ5V:bVFoBUAjq2txecM2PbO+sveKOf
- TLSH
  T1335408D2214C0FE2FAA74A81DD73CD961DB764F1868A168BCF1CF4A836641D2C6DDC62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

JavaScript

1

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Looks up external IP address via web service

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6