Overview

overview

8

Static

static

1

original-payload.cmd

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    original-payload.cmd
  • Size 186B
  • Sample260629-2p5taah12m
  • SHA256 d414c95b3b7da037b68b6f134a7d683996167b6fdee80a90410e9011ada98e9b
  • MD5 SHA1 SHA512 TLSH
Score
8/10
defense_evasion

Malware Config

Targets

    • Target
      original-payload.cmd
    • Size 186B
    • SHA256 d414c95b3b7da037b68b6f134a7d683996167b6fdee80a90410e9011ada98e9b
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    defense_evasion

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Indirect Command Execution

      Adversaries may abuse utilities that allow for command execution to bypass security restrictions that limit the use of command-line interpreters.

      defense_evasion
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks