ec869afca016841fb2496a9a723226b7aa8cc72e947d7ff3961abdc5250ccf14

General

Target
ec869afca016841fb2496a9a723226b7aa8cc72e947d7ff3961abdc5250ccf14
Size 104KB
Sample260722-rdz4jswekg
SHA256 ec869afca016841fb2496a9a723226b7aa8cc72e947d7ff3961abdc5250ccf14
MD5 4a826a2ac9a3772368d395b6b0cc3c30
SHA1 93279c0c86369599f24443da1e11166d42c5aee3
SHA512 8c2d71f32815f0e93a0b93683026daf45ee74a76236a5899d0e463e6ffc747fe69b949a189dde0019507a729bde2329d98a677054ee2d0c3523ccfbe5925d51f
SSDEEP 3072:LDGduWLV2YNzkV8jZ99/BghHOFSbdJR7YP+n44p66Cav:LDYFrzwqZ99bSb6Phm66Cav
TLSH
T1EAA3127931E67628DE2A8136D0C45DB630B39B0753B904AD9A544AEEF442FC2FD2C58F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  KMS_VL_ALL_AIO_v52/J搜索 - 清爽干净的上网入口！.url
- Size 167B
- SHA256 3af66fa13899dbff8b6956c2bbdcb60922c33d22199962e8042b2e5c7e270a57
- MD5 67788db8cdf941dccd2fef2b6e713df9
- SHA1 069304e1d71d1837633d1d1f00c6252248033fbc
- SHA512 7ff979c0309ff0738d36d13cf82d47ca9ebf7efc2d495afb65fdec74aae18782ebe72e8887228b78717876e7198aca4fbdbe9d1f0201ed3796c7722a793f300a
- TLSH
  T1F3C08C9C8605C686D602A80AB0F4FD0CC42F75A488E2C68C9A04CDAA0C942E6D869A39
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  KMS_VL_ALL_AIO_v52/KMS_VL_ALL_AIO_CN.cmd
- Size 304KB
- SHA256 078058a6b3b3ccde37f2e5591654023ef5825a76e4dba380f910117a17219cac
- MD5 f84b8cc54389811a9c86e93ead44fb89
- SHA1 2a52cbc42f68116c3e80efce025c373d268014b7
- SHA512 eaab019b678fd331120adc39e9755b1d5def5354ade75ae368f58ab7c1c09f777448ae716eb5978c8891137c68549b27ddee37ff2e01e807451421feb084ad8c
- SSDEEP 6144:uRJVJQ3meI0qRGT0S3CcpEkr6gIeQ6TsHjcqoD+N8K5:8JVJQ/I0ZNpEkrzISTsHAqw2D
- TLSH
  T105646C0235852165C3F21336C762B14BFF2EB2AB46F2A59CB56EC0517FB608346F7689
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

execution
behavioral3 behavioral4
- Target
  KMS_VL_ALL_AIO_v52/爱纯净官网.url
- Size 239B
- SHA256 88f334cdc26a2adf5c75080973c4ff5d306b3d28c569fb8fd0349d4bd6dcf5a4
- MD5 1010347dd74981a705f9fa2f0ed23aee
- SHA1 19b3f51cc469be8ae0245953d3cc8d403bc5b0a4
- SHA512 a6e5d8d9d4c638f39a9128a21c5e23c8e140f7a70fc63c202eabb3ff166aaf948f134326a70c9cfd2d6fd0d810dd00b98803fcbdac33ebf57ec91e8b8a4663bc
- TLSH
  T19BD05E8C491FC10DD7429C9B70B5FD05D40E74D08DD6C0CD524CDDE50E98083A88A293
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

Windows Command Shell

1

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6