0d4e5cb8bdebf7b745361cc8be7d5eed0fad228d8cc6adfe156b1c96024197ad

General

Target
update.zip
Size 785KB
Sample260731-h2w75axbkd
SHA256 0d4e5cb8bdebf7b745361cc8be7d5eed0fad228d8cc6adfe156b1c96024197ad
MD5 ac6c03cdd722b95b3ab85f047ec70ef1
SHA1 7b269bd929d7ff36b2928f0df4d8e739ebed4f46
SHA512 b0a84d72443cb1a9b3cb788738064353efea3be6c29c77caba564c058711bbaa6947abdb94104f2dbc4c0992badf4dcf01afb83cd7bf222d1fc9c4a51741572c
SSDEEP 24576:Bo80jSQEsr1VMpFOtlyDANIP2pgXoSboSg0y3eF749la:J0jVn1Vm2yD+IP5oZ2+la
TLSH
T15E0512936DBA4FA9609181EB259E0A4F7ECF06F195937F3663E268DA00C7D1C34D4788
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Malware Config

Targets

- Target
  1.bat
- Size 1KB
- SHA256 1ccc7e6d4daf8829c31e4733b42740d61cf438c9790c78f69b918cf82754fbe0
- MD5 7ee31e598bcbc767a98c9183699ac00c
- SHA1 8d4080e9c3a50619e9963cc0f6bc6a2ab0370db3
- SHA512 210d79302df665352126123861209c43e119100dd81f9514fd42659d7f20a7ec69d453b52e45db5d22ae348a19d8ebb38099257d83cad767ba55ec2bca9a2f50
- TLSH
  T14F213F29740C06253C24D272878697A3F868136F262238AFB0E6807467DF35887F59CA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  LockScreenContentServer.exe
- Size 48KB
- SHA256 de9d325af3156232c34916840210efb5706d6e6a5eba1827c8240e4f71c09fa2
- MD5 2cf29ef0ae66fcea7056ae948ffd9541
- SHA1 3d493a1afae9b38d3c0953016a00ef3d9ac514a0
- SHA512 3fd5a0c603ef7630adfc10e69de373aeb66df75f1830cbe83c68df59cbd27bdbe3fe7394a0549ebf8470b48ad207b122acddddc4c0cb1a3ef5e253a462e5fe4b
- SSDEEP 768:eQvZAVIG7PsefP8lAd7MtCwIpS9SL4WZwWCXeG1Po9zvR:ZvIIgL5ta+YFWZwWgeePgzZ
- TLSH
  T1D6233A49ABBA10C1E5ADD23C606A420AF476F262570706EF5199C33C5F73FD4AE39B81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral3
- Target
  dui70.dll
- Size 2.0MB
- SHA256 27a97fb5bc93c515889ab5e79eb59c3486cd063bc5fa849b183f9e6b70e03bc3
- MD5 29d44fa1020be1447203c54707fd7891
- SHA1 41004a49eb953745fbf896adc844b87a1e9600f0
- SHA512 874ef4752bc9a24bd824a2c8cf7de58b7d70502345d876c26b8f8bc04fc31c3b3d10a118f8cfe139a6751b7c240e235fba816cf3d70e6496fc53b0bff9f2bb78
- SSDEEP 24576:XSOu7mMJjwtE/v50t/6/Vax3Bc/Tjd2kJKx2ozdoYq9tBGnqWal2RQ:XhimMJj6E/c6U9BcLjd2kcxVqVw
- TLSH
  T163A54B09B3F50155C1AEF23CE96F460EE3F37800575A82CF5659436DAE23BD16A3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

Windows Command Shell

1

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4