Overview

overview

7

Static

static

3

data/3.cmd

windows10-2004-x64

3

data/3.cmd

windows11-ltsc_2024-x64

3

data/5.cmd

windows10-2004-x64

3

data/5.cmd

windows11-ltsc_2024-x64

3

data/AxInt...ib.dll

windows10-2004-x64

1

data/AxInt...ib.dll

windows11-ltsc_2024-x64

1

data/Inter...ib.dll

windows10-2004-x64

1

data/Inter...ib.dll

windows11-ltsc_2024-x64

1

data/WinUpdate.exe

windows10-2004-x64

7

data/WinUpdate.exe

windows11-ltsc_2024-x64

3

data/hj.exe

windows10-2004-x64

3

data/hj.exe

windows11-ltsc_2024-x64

3

data/sb.exe

windows10-2004-x64

7

data/sb.exe

windows11-ltsc_2024-x64

5

data/ts.exe

windows10-2004-x64

3

data/ts.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    165d9cf3b372f51b0977fe4a158459ccd350cab6fdedb4ccabe2db1d6cf6b7e6
  • Size 1.2MB
  • Sample260810-p6p3yahp5t
  • SHA256 165d9cf3b372f51b0977fe4a158459ccd350cab6fdedb4ccabe2db1d6cf6b7e6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoveryexecution

Malware Config

Targets

    • Target
      data/3.cmd
    • Size 66KB
    • SHA256 583f12184668604e2313b84c9f2c512f3fbd3564e160ffa50d84d4e331559504
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral1behavioral2
    • Target
      data/5.cmd
    • Size 1KB
    • SHA256 06f8612d96fb8e7e05ed1edb5f26ae33fdde4e684e02b0be62b6f1853bb35578
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    defense_evasiondiscoveryexecution
    behavioral3behavioral4
    • Target
      data/AxInterop.WMPLib.dll
    • Size 52KB
    • SHA256 5ec91ec60888314ce9d1a7dbaf9a5f0030db76680666d9e224ca0b2a5fd30181
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      data/Interop.WMPLib.dll
    • Size 323KB
    • SHA256 54b57c25b52881aefd7f78ab15ca835f2048c3b064a0cc00c813e311c2e91455
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8
    • Target
      data/WinUpdate.exe
    • Size 96KB
    • SHA256 944d8404b1715a7e396b17548d742bd8daaade8d4f462e601633402bcc736953
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    defense_evasiondiscoveryexecution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral10behavioral9
    • Target
      data/hj.exe
    • Size 96KB
    • SHA256 c782c7ab5a12785ba70eb19235bd5a40125d1296e8edc12851f4b4fdf34e2c09
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral11behavioral12
    • Target
      data/sb.exe
    • Size 67KB
    • SHA256 6691cc714b36d2c4a46a4207e3ba98879e79d881dabb2d85651028910a205e7f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    defense_evasiondiscoveryexecution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes a VBScript file via the Windows Script Host.

      execution
    behavioral13behavioral14
    • Target
      data/ts.exe
    • Size 240KB
    • SHA256 08c85d489a6d6ca0dc7714cdcdace5492db95ce1fb4abad4a0502b7df0223daf
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral15behavioral16

MITRE ATT&CK Enterprise v16

Tasks