Overview

overview

7

Static

static

1

MADYR (2).zip

windows10-2004-x64

1

MADYR (2).zip

windows11-ltsc_2024-x64

1

HAHAHAHAH.bat

windows10-2004-x64

6

HAHAHAHAH.bat

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    MADYR (2).zip
  • Size 362B
  • Sample260804-sme1eacg37
  • SHA256 3b8f1ff8b6b0e1b1b3d379955a2fd8030a5ee085f9a7b3f384701ed8993411de
  • MD5 SHA1 SHA512 TLSH
Score
7/10
discoveryexecutionpersistence

Malware Config

Targets

    • Target
      MADYR (2).zip
    • Size 362B
    • SHA256 3b8f1ff8b6b0e1b1b3d379955a2fd8030a5ee085f9a7b3f384701ed8993411de
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      HAHAHAHAH.bat
    • Size 561B
    • SHA256 e01079fcecaefff031e0b9890aff9df62a297294464295f31f5155ad62629535
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    discoveryexecutionpersistence

    • Loads dropped DLL

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Drops file in System32 directory

    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks