General
- Target MAS_AIO.cmd
- Size 435KB
- Sample260808-ly332sdk9x
- SHA256 a3ff73134206ae3dc8ab309197c357b94e0711523249b406f1f4b9d1dd481f31
- MD5 9d4ff1bd95e8767c13ab017f9bf6ef88
- SHA1 33719120dda6c2580b3819ffe106acd39a0995ed
- SHA512 2daa0f53b5ff48624cdbbbc4a667853791fc189c77bdd0518db072102dce0d74ad11a6494446d66bf9a4cc54fd4d84f894d906e88a27950dd14a371c01276fdc
- SSDEEP 3072:yddR3S9mF2TrRMP0u+RciNiYbRd8nVFR3mP5sLtV7bJuAMTVFp6zGDNSCE2K0xOn:WABHu+R7rLo97bJu9p6zGDNS0KgOuCV
- TLSH T1639418433E0250A501B3F3BADA27954FF72DC193C321A6ACB56EC4547B5A387A2FD648
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
MAS_AIO.cmd
Resource
win10v2004-20260513-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target MAS_AIO.cmd
- Size 435KB
- SHA256 a3ff73134206ae3dc8ab309197c357b94e0711523249b406f1f4b9d1dd481f31
- MD5 9d4ff1bd95e8767c13ab017f9bf6ef88
- SHA1 33719120dda6c2580b3819ffe106acd39a0995ed
- SHA512 2daa0f53b5ff48624cdbbbc4a667853791fc189c77bdd0518db072102dce0d74ad11a6494446d66bf9a4cc54fd4d84f894d906e88a27950dd14a371c01276fdc
- SSDEEP 3072:yddR3S9mF2TrRMP0u+RciNiYbRd8nVFR3mP5sLtV7bJuAMTVFp6zGDNSCE2K0xOn:WABHu+R7rLo97bJu9p6zGDNS0KgOuCV
- TLSH T1639418433E0250A501B3F3BADA27954FF72DC193C321A6ACB56EC4547B5A387A2FD648
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1