39c99a58dd66c858c2e1a96ac16fceaf454f0ed11817bde88a35e762a830b76b

General

Target
01_clickfix_payload.zip
Size 1.5MB
Sample260807-kzb6aa1dnh
SHA256 39c99a58dd66c858c2e1a96ac16fceaf454f0ed11817bde88a35e762a830b76b
MD5 57f89d4af02bd8268e26db78e16ad250
SHA1 c17e3647644e6a91d5bd29173552f49cee0c9297
SHA512 50dc45fd1a72a1e088e697a1a19692d9acf78244b2bcdd6b203301d79f4cd4b8d0661332f074781f86bbf29daadf230e45b8a9a6502df0aa8e884b72d4d16a4e
SSDEEP 24576:GjeXhHryO0WsJPTrRMhqYHp9eJuDDQ41lT3aJSy3htYCcUWTTjO:JHL0WsJ7VB+eJufQSV2/xtG3i
TLSH
T1FE65234A4EF7C3AF481D91B218A58DBF7E7C2267A8531C719C7B28E60207D6941DCE2D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Malware Config

Targets

- Target
  01_clickfix_payload/1.bat
- Size 1KB
- SHA256 5fccdd7ed913ed7d337c1483528eaa87b51186d8174e38ad665dbf8d94bcca88
- MD5 626a9ffc5eae14e176d7cdf85f96cf8f
- SHA1 570aea31524da46bd0327f090d77836b3eb0519b
- SHA512 08ed1797a03ce7a8436af0693e9220317b0a74972025fcaeffe99872f86c15efc7c15047b1f499902936554c0b6d8e88eff30f5bfdc9891cc8c9893be7cd925e
- TLSH
  T110215169B81906292C20A373C38657A7F868135F162038AFB0A5C0B477DE35047F69CF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  01_clickfix_payload/LockScreenContentServer.exe
- Size 48KB
- SHA256 de9d325af3156232c34916840210efb5706d6e6a5eba1827c8240e4f71c09fa2
- MD5 2cf29ef0ae66fcea7056ae948ffd9541
- SHA1 3d493a1afae9b38d3c0953016a00ef3d9ac514a0
- SHA512 3fd5a0c603ef7630adfc10e69de373aeb66df75f1830cbe83c68df59cbd27bdbe3fe7394a0549ebf8470b48ad207b122acddddc4c0cb1a3ef5e253a462e5fe4b
- SSDEEP 768:eQvZAVIG7PsefP8lAd7MtCwIpS9SL4WZwWCXeG1Po9zvR:ZvIIgL5ta+YFWZwWgeePgzZ
- TLSH
  T1D6233A49ABBA10C1E5ADD23C606A420AF476F262570706EF5199C33C5F73FD4AE39B81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral3
- Target
  01_clickfix_payload/dui70.dll
- Size 1.9MB
- SHA256 eccd5e3cf1304f41e7e4add0c6e6769d14da10885ea9fb8fb0e0b42151b4d376
- MD5 0923807dcb5e06b6f9e9849c3fb52e30
- SHA1 40aac197d2b09d838203fabab06e4926ac5aaeb9
- SHA512 6e0bcaaa5f2f2d90f0e5362e4382f4fb434c784e897df1676351823dd38e97564b57682688bcd7fa799c3f9c29666f51628e7f5c7a1aa8de305115239260c4c9
- SSDEEP 49152:0KimMJj6E/c6U9BcLjd2kcxVqVwqcCdg2:mR/5UrAYkcx
- TLSH
  T110954B1AB3F90196C1AEE23DE55F460AE3F37810472AD6CF125C436C9E23BC5667A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

Windows Command Shell

1

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4