General
- Target b7e0919a3e4a677539dab51753807c1a58362513ad7229f0c565e55023e76183.zip
- Size 49KB
- Sample260622-v3eqpaez31
- SHA256 8be2ef6d4a4ddb67fd19c5ee47d68fd8019d87eb2a3906f83bd8a9382779d81e
Score
8/10
Malware Config
Targets
-
- Target b7e0919a3e4a677539dab51753807c1a58362513ad7229f0c565e55023e76183.vbs
- Size 94KB
- SHA256 b7e0919a3e4a677539dab51753807c1a58362513ad7229f0c565e55023e76183
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Peripheral Device Discovery
1Query Registry
3Remote System Discovery
1System Information Discovery
4System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1