General
- Target sample
- Size 274B
- Sample260802-sdxh4avhle
- SHA256 0032588b8d93a807cf0f48a806ccf125677503a6fabe4105a6dc69e81ace6091
- MD5 dde72ae232dc63298465861482d7bb93
- SHA1 557c5dbebc35bc82280e2a744a03ce5e78b3e6fb
- SHA512 389eb8f7b18fcdd1a6f275ff8acad211a10445ff412221796cd645c9a6458719cced553561e2b4d438783459d02e494d5140c0d85f2b3df617b7b2e031d234b2
- TLSH T157D02E723688C4A8E4923EA90EAA83CC5D28A9A034C3C215084AB6B098801574E336EA
- MD5 SHA1 SHA512 TLSH
Static task
static1
Malware Config
Targets
-
- Target sample
- Size 274B
- SHA256 0032588b8d93a807cf0f48a806ccf125677503a6fabe4105a6dc69e81ace6091
- MD5 dde72ae232dc63298465861482d7bb93
- SHA1 557c5dbebc35bc82280e2a744a03ce5e78b3e6fb
- SHA512 389eb8f7b18fcdd1a6f275ff8acad211a10445ff412221796cd645c9a6458719cced553561e2b4d438783459d02e494d5140c0d85f2b3df617b7b2e031d234b2
- TLSH T157D02E723688C4A8E4923EA90EAA83CC5D28A9A034C3C215084AB6B098801574E336EA
- MD5 SHA1 SHA512 TLSH
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL