Overview

overview

8

Static

static

1

message.txt

windows11-21h2-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    message.txt
  • Size 33B
  • Sample260810-l1b3cafd32
  • SHA256 d8fef807b03c9a6a1f4b8e268b78297f6686eb6fb72907967b5329d67c6571dd
  • MD5 SHA1 SHA512
Score
8/10
defense_evasiondiscoveryexecutionransomwarespywarestealer

Malware Config

Targets

    • Target
      message.txt
    • Size 33B
    • SHA256 d8fef807b03c9a6a1f4b8e268b78297f6686eb6fb72907967b5329d67c6571dd
    • MD5 SHA1 SHA512
    Score
    8/10
    defense_evasiondiscoveryexecutionransomwarespywarestealer

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads ssh keys stored on the system

      Tries to access SSH used by SSH programs.

      spywarestealer

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to get system information.

      execution
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks