Overview

overview

8

Static

static

3

Verify_files.lnk

windows11-21h2-x64

8

docs/doc_verifier.exe

windows11-21h2-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    img.iso
  • Size 5.6MB
  • Sample260816-2e37psydng
  • SHA256 a2596ff17245c8b116e09125e5934532f224dbf6bfc133382367a09a08ec745b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoveryexecution

Malware Config

Targets

    • Target
      Verify_files.lnk
    • Size 2KB
    • SHA256 b5eb330dcdb967bdfff6bae5a5f705efdc8836e18bc15f2e403412ad71c1b85a
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    discoveryexecution

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution
    behavioral1
    • Target
      docs/doc_verifier.exe
    • Size 5.2MB
    • SHA256 ef5a6cec1863b04001188b096a054f811c92a8d2c291dbbdbb2cc10a9053684e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral2

MITRE ATT&CK Enterprise v16

Tasks