a2840ce924ea1d113af8530c6d8d524be9750867689256578c9a30e12c7e373f

Sharing

Copy URL Twitter E-mail

General

Target
Loader.rar
Size 6.2MB
Sample260730-crvzes1tft
SHA256 a2840ce924ea1d113af8530c6d8d524be9750867689256578c9a30e12c7e373f
MD5 a413734e011d9e6a52f6be462fa6971e
SHA1 0314c042deadcda9ce198f6ff8cf229ff1b05221
SHA512 6648b7a37ba00c67107275551f03c1b2bbb1c6e918fc4d7c06f565ecc327f44fc027fa21b5fd6e4a141ff7f39c1f3d16f8df648f870ad597de20a07d7934c17e
SSDEEP 98304:qebhqPsnCGPPhjirpi4JHcKsSCZuuHerHRatUuqi1HiirzAd0AmY3GrghC/sFvKU:p/nCyPSmjVZufrHR0zHTYcgw/sx92A
TLSH
T1AC6633F77F46D33BAB09405FE5D81626580EA49CF3FB3479B8B94C9AA282C085D4C6C5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution

Malware Config

Targets

- Target
  Loader.com
- Size 283KB
- SHA256 af177e8faded6f56e40f91fe8b1e208a3f2a0e82e7b9c5475ee4d63b69119dfe
- MD5 01954f8d35b05fb1181bc0efb0d3ad82
- SHA1 0b31948df873524c006709717b8f45e844b4413d
- SHA512 de87fa8d0205a3e2b76c44a1ccf87fb8e9c4c8b009d26b1432530b4b19e4b8fa7414ccceece0ca1829ec0f304dda9a4bd8d2de571ead6007b150ee9911aa9c5c
- SSDEEP 6144:paLOeyff4sZfVkwIOBwdjpxlt/I63ISBKqa2zE0SYOPiFsCyoZHz2:paSeyfKfOBwi4py2zE0Stwyqz
- TLSH
  T110545B12BA5554B8E49BC07483568673AA7374CA0B22E9FF02D595343F6AEF52F3C708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Executes dropped EXE
behavioral1
- Target
  Microsoft.Web.WebView2.Core.dll
- Size 615KB
- SHA256 4a4efdf712ceea4050eb2252ec2a9136cdcf32b9bfbb3ad58d79396f36e9665d
- MD5 46a2bad2d6b66af8279bdec2feb53afe
- SHA1 76e22a752b2720ad0329b5dcf833820bb73c73c3
- SHA512 b958cdcc84885bd67328f810163c087d45113cbc995fa35920297e037d1e1dcc41e03dcf25b060be528cce53ae46dc7fb3d43d2f12390d195978579091d1fc27
- SSDEEP 12288:v6AN7ERpkbC65sPiXqXcN/gIYxmG8WD6ptvxmgHAVxQz8tAgJrP322Uc+iKmDR57:tC
- TLSH
  T15ED4412223F94619F5F27F79563917608BFABC96BE78C35D8698502D0D72F8099A0333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Microsoft.Web.WebView2.Wpf.dll
- Size 80KB
- SHA256 d797f41b5b125b7f155e995808ae68377f3f3876ad4dfd86fe2b5eaaf7f8a569
- MD5 4413cecfc59cd9cc067d8e9609ffa9cf
- SHA1 a345b1b36945279d72a22adbe8653ac81b1e3b90
- SHA512 680afd0c1a0427d440833161633ed47a110af782d6b43a62006b6c13176e3a7621e199a931610772fb3e8250cca0e81c49a6e3b55f7ca9a6c0f8d9b656d559db
- SSDEEP 1536:sG8rrcaIqqE6PV7gIM2KbQy9Zy1w44ha87Y1DHfFWyEb30mpc4Jjr4YeUq+HhxUf:rud96PVY2qm4a8+DHfFC30mpc4Jjr4YI
- TLSH
  T1EC836D4153BC4423C6EF1BFD7DA091240BB9FA837A52DB9E2A84B1DC1C9739219193B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH
  T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Octokit.dll
- Size 1.3MB
- SHA256 6a48642d6ae464b43a6cb50292618af6c73ada8d726644e50d4fa44a1783f638
- MD5 2c2a65e9cf0776fa77600d5fe3b30783
- SHA1 5b1b997e041f8235ef5b60db885bd2ca2711170b
- SHA512 8b33f2ccb33dafb1bfc29dc8c5283c1483525007b5c4e36e90ade2cf26b223b029d0e24a51e0266c7852323644f44668b26e7ff9e7d4419482e4bd0b3afcab30
- SSDEEP 24576:l8PXZv3QFVC5gcrjWYXFWjeYwqseN63pfC35Ax5zg27nYLYFHVLYh9oH:4XGmmcOYXFWjeYwqseN63pfC35Ax5zgc
- TLSH
  T140553B313F9C9E6AD25D3776AC60022A9BF1D58A2362EB5B0730F5263C527C69DD0273
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  bin/Monaco/Monaco.html
- Size 10KB
- SHA256 b5e998236ced3177e44a7a35b33892751d758275b5623cc050872bab66a738c4
- MD5 6c54f348b6511858b8963c5f5bd836ac
- SHA1 7a87f9f4f7eb9c683f2ceb6766faa9af59ef0760
- SHA512 95cab71f791aa09ac10b4d300202703588fd905d3a844063b7b7fcb5dc86e775096d7f8df65b09cff5533960224a3a09dd921ac843a81a0332f1e83d6c778aca
- SSDEEP 192:aEUd3PorvYIc5FUp5keghKcCI2MCTJ3+NLSaPh/WCY/jZfOs+TIDnvnoae:8d3Potcv85keghHwjD+TIDnoae
- TLSH
  T10422A6B9B34E140B01D65315A8F77184FE3CC1369217489FBBDEE610E4ED499435B2BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  bin/Monaco/vs/Loader.js
- Size 27KB
- SHA256 0512d9ed3e5bb3daef94aa5c16a6c3e2ee26ffed9de00d1434ffe46a027b16b9
- MD5 8a3086f6c6298f986bda09080dd003b1
- SHA1 8c7d41c586bfa015fb5cc50a2fdc547711b57c3c
- SHA512 9e586742f4e19938132e41145deec584a7b8c7e111b3c6e9254f8d11db632ebe4d66898458ed7bcfc0614d06e20eb33d5a6a8eb8b32d91110557255cf1dbf017
- SSDEEP 768:3J6C/c2x0cAu57XQxJRDRi+R/TvrCv3zM2GRl0VEj:Z6grH7qTXRvmDI
- TLSH
  T17DD294CEBB9474234247F8E8D43F001BE2B6955E544D842C710DD8EE5CB998AA23EF78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  bin/Monaco/vs/basic-languages/lua/lua.js
- Size 5KB
- SHA256 fc2d6fb52a524a56cd8ac53bfe4bad733f246e76dc73cbec4c61be32d282ac42
- MD5 8706d861294e09a1f2f7e63d19e5fcb7
- SHA1 fa5f4bdc6c2f1728f65c41fb5c539211a24b6f23
- SHA512 1f9297eb4392db612630f824069afdc9d49259aba6361fb0b87372123ada067bc27d10d0623dc1eb7494da55c82840c5521f6fef74c1ada3b0fd801755234f1f
- SSDEEP 96:SD3yDUfRD5dyVdO29SvE/TMCL8CvcOAtOfxSVkxMZlMfE:nD4Ldyn7Ss/TMmUtOfxhxjE
- TLSH
  T11CB11ED89C9951594AE1E766879EE0A6E1544203CC3C7D74B7EC438C4F8CA4C86BE73D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  bin/Monaco/vs/editor/editor.main.js
- Size 2.0MB
- SHA256 93d28520c07fbca09e20886087f28797bb7bd0e6cf77400153aab5ae67e3ce18
- MD5 9399a8eaa741d04b0ae6566a5ebb8106
- SHA1 5646a9d35b773d784ad914417ed861c5cba45e31
- SHA512 d37ef5a848e371f7db9616a4bf8b5347449abb3e244a5527396756791583cad455802450ceeb88dce39642c47aceaf2be6b95bede23b9ed68b5d4b7b9022b9c8
- SSDEEP 24576:SmmBNDw4gCXJkB4nIg2IxhbaeZYIMsNjvit4f:wDw4gCXJk62+aeKIMsNjvit4f
- TLSH
  T12A95E7997155342243C7A0B6A47F050FB33A54ADE80A406CB7B8D8ED2DBE5896337F78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  bin/Monaco/vs/editor/editor.main.nls.de.js
- Size 36KB
- SHA256 0dee462d5fb231f169f6cbc432465a43fd445c011fe650e29f5fb2bccc31eaae
- MD5 4d83bc1bced6f773423be6f939472cfe
- SHA1 1b42889a7f580df9f7d399c33141d38548143ed1
- SHA512 c53d522438767a15b5711099fee0acb62ff21289b62640d1a4823a90c8a7d8836bc932daae477d5188b1ba78c50c581284c4d7379efb532f37d356add97ac8e4
- SSDEEP 768:jADv7LbgRyefe80QqYax/mZgb2ET1UZ0IMlYmz7w0hxH1N1Bg93RyFGAIDB7wZ9m:jADDx80QqYax/mmb2YLIEYmz7JhxH10D
- TLSH
  T111F208A2AD43A13B5F8523D2A6415C377E19E1AD7A12500D48BEC52B318B9FAC3DF433
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  bin/Monaco/vs/editor/editor.main.nls.es.js
- Size 37KB
- SHA256 203ff3591e02eb7b55a591e53919cc337f8dea73e6446fc3493227761c0794ba
- MD5 b371235f971baa51f58f123f40c4435a
- SHA1 843d4a2d214c7d9da650cf4d0c6981ac1dab69c6
- SHA512 77d43490f1208dde16b6773551ea983cb2352455178ea0e3d4d4b2f2e05dc406cafae89738001d708b780b58882cf5448eb7a8d1c11aa7b8e87915a390da618a
- SSDEEP 384:hwuiA9wZFjNzWZQz7uDlnDEuoKZvGrkEq1EhBR3H6Sg4eUz+JWCHcxS+S9SxS9tf:Y9ZCZQOtDZSj1XJS+S9SxS9tx78teB
- TLSH
  T19503B83A46CC172315D343CEF193D513E144AC8AB168C2D7A1BD9BA630CCE9CD56FA66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  bin/Monaco/vs/editor/editor.main.nls.fr.js
- Size 40KB
- SHA256 7fde40b2b212d274617232de09452c6cb896e8a3c6b9e0b459f067cd07f31a99
- MD5 d319e61fc6b357b9a5d8e3bbaa44ce3c
- SHA1 b1539b082b2b8290f05dfe17d6fee3d64b2ec244
- SHA512 6ba80b90242dc55ecfa1678e7f8506ed9add4bf08067b125ba63d42b8e8e4455507a86369f6fac6c9d10565d083e7364d4fc79d62e9bd460fe49957c91f598e6
- SSDEEP 768:HlKogi6Q3JbQWxxGmmrHeHPO10xSgGvJ1COIoJoZjbEMO9ms:Hl8KbQwKRavGJoZG
- TLSH
  T1AB03962BA6C422920EC317C3F5636593E834C48C739ED315ADAB56D912C64DCE2DFAE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12
- Target
  bin/Monaco/vs/editor/editor.main.nls.it.js
- Size 38KB
- SHA256 f67cec6dbf98c98c834638d20df53c5a770edada7f26ebf6d0b7dfec60f7a4ab
- MD5 a8855a662eb4d3a771fdab7ba6287def
- SHA1 a78b57810ac8e9704e97897c6168f4140d2eadf7
- SHA512 1c03f8b243701870d8a17e5565da6c65c3f1d76dfb55c88cf68578a4754434a071565da9147e7c833de588a5907b5ece07e018dec52c79d9b2914c964a48a4b5
- SSDEEP 768:4klNUuMam1xYhz2LyXSXBjlHtvnYyjMbRgD5SL2KAqI0UGmGfpspuoeu317K93Ph:5f0SL2KAqKKNpCi
- TLSH
  T12203DA3A458122112DCB23DFF573648AFB6668CC7E5C315614BC462C21CED98B2DE7BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  bin/Monaco/vs/editor/editor.main.nls.ja.js
- Size 41KB
- SHA256 ea9f5e8993017f858cd9ee70aac3d7990ca85eaf40a052025e530fb1c300837f
- MD5 a1f3c9e940206ca310147d644305a6e1
- SHA1 005a8f7023b9d873962c7272203cc0c0d0ccc624
- SHA512 f98ad1e4c127c3aa4a4ff2fa7ed2a65b5d32644211679e42d70aae03f9c0af1da7704061c28e95cbb25ad14745b1d086c9a49492119d0f97653a0b817823bc69
- SSDEEP 384:hIDtFoY0u0ZAITlMRFG1yu9RwJUcQ8bo6CdXtK+c3YcnI+PjnN3H6Sg4dcRID9Dh:VW6RwJrQNdbc9N1aBDzTG7e2ZLlx/
- TLSH
  T10213937CABC0A83A0D25D3B31A8DB4E67815ED5BFC227232807DF42579B02CDD585AB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14
- Target
  bin/Monaco/vs/editor/editor.main.nls.js
- Size 31KB
- SHA256 fdd9d64ce5284373d1541528d15e2aa8aa3a4adc11b51b3d71d3a3953f8bcc48
- MD5 74dd2381ddbb5af80ce28aefed3068fc
- SHA1 0996dc91842ab20387e08a46f3807a3f77958902
- SHA512 8841e0823905cf3168f388a7aeaf5edd32d44902035ba2078202193354caf8cd74cb4cab920e455404575739f35e19ea5f3d88eab012c4ebefc0ccb1ed19a46e
- SSDEEP 384:h03CdtOurX25WyV1Vdf40CJjocZC6F7PKUvRjAaswHq9x3H6Sg4NFVlQlUDZpLjb:23mmysb1zVes3pxCSgwgwjhb
- TLSH
  T153E2B767A78813372A8302DBB2DED194BB1A597D7351034678AD943832C64F0A3BF9F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  bin/Monaco/vs/editor/editor.main.nls.ko.js
- Size 36KB
- SHA256 100ca482c015571ed9aad97c2dcc5e266b270a650ce892507443b5d4f32df64f
- MD5 9ccf83d22e9a9bfafa2000f366ac47e6
- SHA1 be61e121af1a363aa66d875f46e78562a603566e
- SHA512 3d68816994abff5c528610733cc729e91d390422c2ee2259dcef3cc4db9a599c1f3800f412259fe2f9a700bf2847b942a253986c011c659868bc9edaae6c2f16
- SSDEEP 384:hS67TmO5oU1Yh4XK8ApE6/z2dHDNV1KiAaA+17tDDN3H6Sg4s/zKz8G3uyroDXYd:rmO5oGXrmi1zDB12zKzuyroKcNVk
- TLSH
  T1400342B379CB979825478A855AA1B675C382E677FB830080DC9ACD70CD588E3454F8FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16
- Target
  bin/Monaco/vs/editor/editor.main.nls.ru.js
- Size 56KB
- SHA256 fa180f7b77ee252aefe73ba5993fbe7c89f43482358d7fd32e8e2f50b3b21bed
- MD5 fd1aa66906d2b3c0c9b734b17f04d73b
- SHA1 299145469d5d5397a42274ccc908c865ebc46cfa
- SHA512 235c2ea1806c13dc0b85f06b5c9f2f811bd145968e2a0ad47c3fa1e063d408efc034dca7baf0b91942cc34e995d1274692c5556c2fb875dbb1054157da9c0132
- SSDEEP 768:CXH0AKgvFBBK1ED81Z0LVdcan9oUxPr1TPgFuEFYPm/XftWZc:CXHXNtBBK1SLVdcan9oWPgFuEFYPm/d
- TLSH
  T130439CA256DA50AD0201B10BDD087E497EAB86FE3FAB533605B43D7E34F3024C76D65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  bin/Monaco/vs/editor/editor.main.nls.zh-cn.js
- Size 29KB
- SHA256 ac881e6f56544ed9b8dd4fd8fd8a73f1da864fb8d79d91c45f5a51f923bd5287
- MD5 f954ac1091c6d0b640ed5f0abdcd8adb
- SHA1 43e0d5e39910d124c384549df0b119ad1ebb12b3
- SHA512 8aff4877bf97ca29dfd5555fe5078ed3f05ac99c43f12c9b1c4d77ca11b1d040a81e0769c10a46a0bb32f3ffe72ae1a223faf5276d05a11f981aa7677e140c83
- SSDEEP 768:FzMPbIhYBG5OcP2WyCzVsEJvjA1agnGMR:F8fcPN8Gw
- TLSH
  T195D2C7522B8C7FFA3C416396971EC0527A04A75B723B9022A3F3FD5C15A14AE47CAC72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral18
- Target
  bin/Monaco/vs/editor/editor.main.nls.zh-tw.js
- Size 30KB
- SHA256 7751df224ac12dbc2e918b12fdbaa465306b6c511e4e1587790163edac18ad46
- MD5 73031ff9956da03354038b3185222af8
- SHA1 712cbf8027cae6c422490499538ec4a0928c6a78
- SHA512 48b80e78a6751ff58eb33ae92f3ad0e31d2e719d9dc9f4926db41e44f8ca9819cea7b657196f4f96c8a1291d57c59c70ffcd64cc9f8cdffc12bc6b5ff6c50e77
- SSDEEP 768:pEOtM9oECeRbdFF0D1N+QZyzB0StZ4XUeqJ1wrv6Vl9YLz1/ewyOm:HXEJpdFF0xN+QyoUeqJ1wrv6Vl9Y8wo
- TLSH
  T1D2D209720FFEABF53E42B3AD731912616D0D6B0A78323121157DBEA419975CC13DA872
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19
- Target
  bin/libz3.dll
- Size 14.9MB
- SHA256 7db664f4f0a1eb059d50327b338813cb5cfd2492f590846899e50df533fa77fb
- MD5 b0097e1ea9d0e44eee5b2d28681e57ca
- SHA1 4d432a82588f1ee37a60b88d63341619e367d862
- SHA512 aa32f14e8aae31d93023c0ad7484039ead03914413f251a35ccfb80114fe1e542b4b29415642851472b076959701cae0cde151bfa5af6a7134a0c0f409bf4a29
- SSDEEP 393216:/E6xIyu++Qq0w3aJp9lAqcJgwVwGnudpXASLCBrJ/k+hB4l8:/WNcqB4l
- TLSH
  T18AF67B9B52AC10E9D1FBC2BC8A1BD917DBB13419037452EB15A44A6A2F13FF2977E700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  runtimes/win-arm64/native/WebView2Loader.dll
- Size 137KB
- SHA256 1785c10eeaf9ebf1bd7647f12196e6946d68ce517bf7bababbfad8faf6951456
- MD5 2b320fdb55f249f0d73817a66c202bd8
- SHA1 969e7c8e321436d28208a42c83fb10c8bb6e54b4
- SHA512 672f6eb2cdb5adb56a394904e40a71026f7b5925c6b40568c82b956f6570ab6652c4a6a136a6fd8f3c405008117e5e6117ed8b08aa5e1a0c235d9164e1706a84
- SSDEEP 3072:EErPYj4/4cFuFDmPZ4MPz6OSZT96TEtJCgQ9c2sd:EErPX4cF0DgpTEtJv6M
- TLSH
  T159D32B8326DD1443D6D3EB7CD9678950232BBAB88530CA4B7153410EDF6FBC1DEA4A26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  runtimes/win-x64/native/WebView2Loader.dll
- Size 161KB
- SHA256 1970ae5e398666304483203dae64f8bc3327811114ae38bb3484ecbce1386b41
- MD5 075e4272f2815b3b6bc7caf0ebcc65ae
- SHA1 6ba407862fedc14fde92d4f4093249d2ba371ea6
- SHA512 6481605b96e4eb61443ae4bf0b51f4a9dc7c792742385e15418c9d06f136247fb2e81f632d30357cd0cde988a64c264a1bb8384cdf4a7d1fb94b78990636b692
- SSDEEP 3072:Wz49om6TlTRTEAzThTNTmA9r6b3oohrjmx9kAiACZ5AalK9TIjEtJ5/a3k:WswTlTRTEAzThTNTmAETRnmx9kAFCHEz
- TLSH
  T120F35B5772E9007BE16A8274C9A34A12E777741107509BEF03A4477A1F23BD8EE3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  runtimes/win-x86/native/WebView2Loader.dll
- Size 113KB
- SHA256 1064ab1c2cdc0746b100f021514d591043da7cc1583b450dd071d291080c53ef
- MD5 4e5905898ae2075676abbe34ffbbc511
- SHA1 3383c05de93e41ba6ad68b3fc52dd2f0eb9057cc
- SHA512 e481a444ccee4d41ba5a8a547f69492e315123a8bbe5309dea573a71239c68203bab9b15835da16b23d50a1efdb0fd5d044143f77759fd5544834a4670dde348
- SSDEEP 3072:q5S+1NJzO6ecBL2McQ+l1PgqeNZvTzqEtJZAl3TCJ4fmdv:qrNJzTBgbl6mEtJSdGJ2mN
- TLSH
  T1FBB36B5176D08072E5BE0A380574EB655B3FBA61DFA09DEB279409A94F307C0CE35E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Command and Scripting Interpreter: PowerShell

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23