General

  • Target
    aa1e3547010357ab5d332d115e1aa9d227b1a0065cb7ccf8f048d2914197e723
  • Size 4.4MB
  • Sample260811-r91d7aeh65
  • SHA256 aa1e3547010357ab5d332d115e1aa9d227b1a0065cb7ccf8f048d2914197e723
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      HKA.exe
    • Size 4.5MB
    • SHA256 6ad72af453a9c4db99a30317e97689e893a110681e84655392865c8a813e8a5c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Executes dropped EXE

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      当前目录添加到WD白名单.cmd
    • Size 416B
    • SHA256 f9e65a39bfcb45fa75a3fcce4c421a33ddd726dbf5a300ada0623f1ee3fcded2
    • MD5 SHA1 SHA512 TLSH
    Score
    6/10
    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Target
      当前目录移除WD白名单.cmd
    • Size 422B
    • SHA256 608896bbc173dda3037eefca287ad6de2b032c14423b01d06135632c54037995
    • MD5 SHA1 SHA512 TLSH
    Score
    6/10
    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

MITRE ATT&CK Enterprise v16

Tasks