Overview

overview

6

Static

static

1

degdid.ps1

windows10-ltsc_2021-x64

6

degdid.ps1

windows10-2004-x64

6

degdid.ps1

windows11-21h2-x64

6

degdid.ps1

windows11-ltsc_2024-x64

6

tests/degd...ts.ps1

windows10-ltsc_2021-x64

3

tests/degd...ts.ps1

windows10-2004-x64

3

tests/degd...ts.ps1

windows11-21h2-x64

3

tests/degd...ts.ps1

windows11-ltsc_2024-x64

3

tools/hunt...ce.ps1

windows10-ltsc_2021-x64

3

tools/hunt...ce.ps1

windows10-2004-x64

3

tools/hunt...ce.ps1

windows11-21h2-x64

3

tools/hunt...ce.ps1

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    deGDID.zip
  • Size 117KB
  • Sample260808-sjm7lss1ex
  • SHA256 70b132eb93152af4e060b8b32d5ee0e9fda105cbe6566446b791b23eae4e8a39
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
defense_evasionexecution

Malware Config

Targets

    • Target
      degdid.ps1
    • Size 135KB
    • SHA256 52e9fe1d10d0d5938d7ac1d2daae9cb6634ce6afad7654e393827efe65ea4e1f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    defense_evasionexecution

    • Obfuscated Files or Information: Command Obfuscation

      Adversaries may obfuscate content during command execution to impede detection.

      defense_evasion

    • Drops file in System32 directory

    behavioral1behavioral2behavioral3behavioral4
    • Target
      tests/degdid.Tests.ps1
    • Size 30KB
    • SHA256 47a2fb5672a4e2953ae7664dc0d822f8ab4c7185b4e0437025dbb52b7adf8b1a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral5behavioral6behavioral7behavioral8
    • Target
      tools/hunt-lid-source.ps1
    • Size 12KB
    • SHA256 f8b06dfe94eafa6f02f2de4294f7e1d9dc1e4f8b53174b67f2ad60b648bec504
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral10behavioral11behavioral12behavioral9

MITRE ATT&CK Enterprise v16

Tasks