General

  • Target
    WinActivateWorks.exe
  • Size 826KB
  • Sample260724-byards1cnb
  • SHA256 bd043633db667ad049863c9d3129e152c3dd683f837f063e6c1c41ac14ff1ba1
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      WinActivateWorks.exe
    • Size 826KB
    • SHA256 bd043633db667ad049863c9d3129e152c3dd683f837f063e6c1c41ac14ff1ba1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

MITRE ATT&CK Enterprise v16

Tasks