aa030433b4bb9cce7eef168738c6b9210809ae523b2853edd6d220ef0e0bb56b

Sharing

Copy URL Twitter E-mail

General

Target
N5 menu fix.zip
Size 63KB
Sample260717-j2e5aae19k
SHA256 aa030433b4bb9cce7eef168738c6b9210809ae523b2853edd6d220ef0e0bb56b
MD5 020d532eb18b6507dd4c471d3999d91e
SHA1 5b0d6983ff5e83d805e814b9db886e877ad572be
SHA512 0854162dd6f6d581511ba380fc425910bfff5cb3b518e601df3b00e84b38a1a30b797e11257d5f3122a9614c7fd9166398fd5ec21f59e099b368eefd8ccf5c10
SSDEEP 1536:Ejx4t9urfow8sKdauUh+o0CM6N0PT2ASifncRt9s/O:EKCfhKdaugX02N0K6KtP
TLSH
T18F5302578891E2A1C73B98F445CE759F500AAA2118062F8A7ECC89373F9DD770B20B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion execution

Malware Config

Targets

- Target
  N5 menu fix/ac_bridge.js
- Size 165KB
- SHA256 9965629542887831fd6d011160ff0713e30ee2c72027e0519288f2459fa71102
- MD5 f1a928f32a741b424516e77b4ba8aa66
- SHA1 0da57279964fc31dc319b7f2eaaa31a363923690
- SHA512 dd19c5efcf431fe83e0dfa2a8786261ef5ddba524d96cbf95659f1566614b7f1a698ad56cdf970727b278c037bc54ceef683a006c2b0c00f0d76902b2f31ec57
- SSDEEP 1536:5Ba4NtbuBVyEJgMZp77n/cr7pvzrT1JWct307G/a0s4HAKBeRV3d7gbWbD9eP75u:5rNVFuTwpvzEKWbD9e1PzWXIsWpstx
- TLSH
  T10CF37385366796D6C53AA359EED5C04DF67509630208DBA4F8BCC2BC8FB1824D1E1FE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  N5 menu fix/discord-rpc.ts
- Size 2KB
- SHA256 2b5f1fc0870663c432b6bab6cc83c354e06ef1f1e598f25d9df07460bbeff3ff
- MD5 55d67a938cbd1f3b9de727e3a143f109
- SHA1 a9d5d2dfacc3232ceb6e2225efa617377123ec3c
- SHA512 f6b4aaa6da5de998ae300702c19bb23563c7c9373612917dae92176aaf5663a94eadd89267946499af829a92288d81a4e89bdf36df744f689d1739db4bffab5c
- TLSH
  T1ED51210F15F6003643B71059665B924671124213130EDB6A7B0E53B8EFA83ADF6E7BEB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  N5 menu fix/otherstuff.js
- Size 27KB
- SHA256 7e5714abb0e45300bfa1882924249f1617da6801464902f1957288ec56ffe272
- MD5 004dc7349054ad5895828f85f6104f88
- SHA1 81ef8fff810cd91ab48f6054db4b52a50e5c4766
- SHA512 3d514a331df427e347467e22900ea8f4f234aa4d7b83ecd83f6f0ef567f8f02aedc0997b8224cbfcc1bf5eb35c8a18125bd723fc5f01cd106cd981277838ec96
- SSDEEP 768:YmBOlZUkyKR0wc19u0gWQUQFpUoDBMaxU8RKUJVSsna3zB/LeZ:YH4kWQUk2olMOUYoa
- TLSH
  T192C2E1815F719E096DED63868AF149293A1E03E98DD73F97C4E4E37952CC4A13D13D90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  N5 menu fix/runtemp.obf.bat
- Size 16KB
- SHA256 78877f0d9cb9a0c90d2042eeabea22795bff3a023ce1a3c078c775948b7457f3
- MD5 83caca845cbb6d7c8ba6286c8acd518c
- SHA1 e13655b1b707c474390db123f0c6797f6e97ef23
- SHA512 4200f47c19ebf735d36a92abb1b7f70849b5039160f7b75fe401ed3b292b4faec7b86a8320c7a972c4f05d2d5c256782ebad17e920d18a57a15fa7f277013f19
- SSDEEP 384:gDRRYEfGVajUBkT1Mr06EvC8tivgzn4qrymhpJVOxZ1k0sjhGz6:gd6IkshN6ERjn4uyKpJVOxZ1kZGz6
- TLSH
  T1E172F4A0E9A29F6112F87A83DE1539C5736DCDF1D720E2FDF81A42E81E1D32BDA05121
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion execution
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Ignore Process Interrupts

T1564.011

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Command and Scripting Interpreter: PowerShell

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8