97550c22d6b827ede537379629b96a233b138b46c1ca2db4c95d48974400a67a

General

Target
Downloads.rar
Size 945KB
Sample260720-tvycdsf18m
SHA256 97550c22d6b827ede537379629b96a233b138b46c1ca2db4c95d48974400a67a
MD5 411751551d92b2df19451793991ff39c
SHA1 20110ddbb6b72edc1325514e200e3c37d4763958
SHA512 74eee0b70b6a386ddad108137ecbcb7141b90890ed6961e7534c0057bc6160158f141887f6bef8b40a13391d2ea145030bc11e36474b38246cd9483b2a536f4d
SSDEEP 24576:dEoo5c7OI/pCoSmIJUWYitlTkRepyiPiRgZ4CSVVwYIl9Hj:dEd5c7VpCoSmyHkRKRaSWVV7Il9Hj
TLSH
T1ED2533DA9162313479714422EB76A093B45032BAE145F2E0BB04D39C91B1EFBB37726F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion execution

Malware Config

Targets

- Target
  Xeno_Cracked.exe
- Size 2.0MB
- SHA256 1de6513b8ca27d582f51e16a1391d2168be276a46d9e8298d853b556f167f48e
- MD5 809049554983a275ce1958829311c172
- SHA1 77227454d807122b5409a3441da119e376c8e623
- SHA512 0b21455660d6fd70823fdcfd3edfe2b9f8cc2f000b50fd55ff5ec91157c7b7facd772b7d7c9bd1664a9b9a1b18bbc1a275f549c586c5a008b8dc228b4908ad8e
- SSDEEP 49152:M4C0ho3o63qTA2mDTJ6uqeg9kiQAUS/c76UisK9xrqAnfKWr:6kuqeg9kiQAUS/c7Wj9dWW
- TLSH
  T13F95C056B7B501FCC167C03CC696D61BE7317818172096EF33E08AA92F63BE11ABA751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

defense_evasion execution
behavioral1 behavioral2
- Target
  Xeno_FakeAuth_Server.ps1
- Size 4KB
- SHA256 008cdcc8a39d32f0c65f39393c40af744dbf5b0e39e49435ecea99b616f06552
- MD5 cce8cee6d15e2b172d259e15d2934f1c
- SHA1 93297beb8d41e87672553eddce2951bbefa0c9d7
- SHA512 952eb34f50c93901a646f2e21c3587072f4d14e864f1f2875d53cd64a352d3e1ef7d84ad1a07beb75607cf882d49f6b2b08ed4fbb2087ee5877296f2cbde4563
- SSDEEP 96:F4Y9zHDDY0xjdXlCVi1VpuClRCRucC5aCaXPikJwg:FN1DDpbXlCVi1VUClRCkcC0CEPikug
- TLSH
  T15E91ED3599622C3B4353707B18667B45B5E8C03763885D29BB4C80ECAFC592D8AB13FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  add_hosts_entry.ps1
- Size 355B
- SHA256 abafca4c362c076c5b8593eaecb6636f59ed845da7225412aa2b5a1e6530e5e8
- MD5 d16e96fa1ac2fe5ede3d4b6697f944c4
- SHA1 adba283439fe4d0f50a758e44954acdb82e02285
- SHA512 8d6abc617f01f92ec1fa0b23525105e8de4315e1461a23b73d728ac0eeb5038da9f2d1197ef1f746123771a204f65a1e742ee7362b1b264061ea6b680f5d2871
- TLSH
  T18BE0D8B10965DE0386B4935BC9A1F4E4A4A5827341897C5DB64493A875E326CA0A8CA5
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution
- Drops file in Drivers directory
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

2

T1059

PowerShell

1

T1059.001

Windows Command Shell

1

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops file in Drivers directory

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6