General

  • Target
    27072026_1610_invoice_files.zip
  • Size 515B
  • Sample260727-tmwtlaxsds
  • SHA256 7ea7cf26dc805352ae969f319cc59de6a00f75e774a4cf1a914619885693d3ea
  • MD5 SHA1 SHA512 TLSH

Malware Config

Targets

    • Target
      old_inv.lnk
    • Size 1KB
    • SHA256 744a95969080de71859736265fa5ac692ec836778fc44936f12e4c5033fbf9fb
    • MD5 SHA1 SHA512 TLSH
    • Indicator Removal: Network Share Connection Removal

      Adversaries may remove share connections that are no longer useful in order to clean up traces of their operation.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks