General

  • Target
    Financial_report.bat
  • Size 1KB
  • Sample260730-av7raay1ew
  • SHA256 676064288d38794cc07da8d8d86e369cead782fbf37b1ac54b789c9593fcf7e6
  • MD5 SHA1 SHA512 TLSH

Malware Config

Targets

    • Target
      Financial_report.bat
    • Size 1KB
    • SHA256 676064288d38794cc07da8d8d86e369cead782fbf37b1ac54b789c9593fcf7e6
    • MD5 SHA1 SHA512 TLSH
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • SimpleHelp remote administration tool

      SimpleHelp is a remote administration tool that can be used as a backdoor

MITRE ATT&CK Enterprise v16

Tasks