6b30c16cc348f185b335d546d1dd787c54acd0909538e7681f11cb8d465dee93

Sharing

Copy URL Twitter E-mail

General

Target
6b30c16cc348f185b335d546d1dd787c54acd0909538e7681f11cb8d465dee93
Size 261KB
Sample260806-e4y8qax1cw
SHA256 6b30c16cc348f185b335d546d1dd787c54acd0909538e7681f11cb8d465dee93
MD5 5cb45a8229399eef7547a48425021b0f
SHA1 cfe9d40ef10715cad25e69b5e10d2da5ce1334c8
SHA512 242b78b8fdff64487773f11169a45e0a5edad1ab7b2b2154eed046703dca4c0d45047130d38265f2fbed358274e5f46786bd5568f8a9ef8433f3a377b1fe1934
SSDEEP 6144:syWZ6otlBWOVc7dkJsXsFqFiO3ERsIQoRFW:syWZRWjpkJ3gFiO0RsIbFW
TLSH
T1E044AC02FFA788A2FD6645FE19B282968E36FD111930CA0732C2335D78FD5164E6972D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  6b30c16cc348f185b335d546d1dd787c54acd0909538e7681f11cb8d465dee93
- Size 261KB
- SHA256 6b30c16cc348f185b335d546d1dd787c54acd0909538e7681f11cb8d465dee93
- MD5 5cb45a8229399eef7547a48425021b0f
- SHA1 cfe9d40ef10715cad25e69b5e10d2da5ce1334c8
- SHA512 242b78b8fdff64487773f11169a45e0a5edad1ab7b2b2154eed046703dca4c0d45047130d38265f2fbed358274e5f46786bd5568f8a9ef8433f3a377b1fe1934
- SSDEEP 6144:syWZ6otlBWOVc7dkJsXsFqFiO3ERsIQoRFW:syWZRWjpkJ3gFiO0RsIbFW
- TLSH
  T1E044AC02FFA788A2FD6645FE19B282968E36FD111930CA0732C2335D78FD5164E6972D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
- MD5 6d08f0d5503bb100b8429fefaad163a6
- SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
- SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
- SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
- TLSH
  T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
- MD5 cf0351a2ab9128838be6b54cea8238d3
- SHA1 c3b1abb890d92a6058de7c3ac2b2185b2f4fd03c
- SHA512 f1a68557d3825ca879f66c1b6828342528e41b8c746d137c51b85e8f8341dcf69bffc5bab76a498113cb53de3f4502644de8a26adaa27c22fa005ee7186f7785
- SSDEEP 96:oXEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3Y8NqkzfFc:oXEvCu5e81785qHFcU0PuAw0uyWIFc
- TLSH
  T16012F892E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $_27_/ENU/scripts/startup/EDCore.ms
- Size 5KB
- SHA256 ab3a1c8968fc97713d1c21c7cd455135522c4caa4a628611a89707ca2fee8f46
- MD5 3e08528adf592ff3ea0c753a6ea630cc
- SHA1 9c5d3efebefdef96c6045b2a22844e9217fcf937
- SHA512 f546112ffccd60f7625116036795a0e636274dd9a9ec022ea150751bec0ddd1ba32d43f5a263c1806bb9908ffdbda3ef47a87dc34db65b888762ff0dd60c3e1e
- SSDEEP 96:oQ+wAktc+qyXb25ovIJKypatT3pmzlV1Nv7jFlJpUhJliIUdGTv2vPa0ukq:0FPyLyQRpmx5TYhjiIUmkq
- TLSH
  T112B1853EFD4A83280600CB1F1AB19058D63AC56917622CA5BDDCC7BE740299E25FDFC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8