General

  • Target
    axontweakspatch.zip
  • Size 19.0MB
  • Sample260816-fr128a1vbw
  • SHA256 bc9553b11643840890dab1e3d4108f2e887f4d63fc86634c269f1fae7fd68d80
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10

Malware Config

Targets

    • Target
      axontweakspatch/axon_tweaks.exe
    • Size 22.4MB
    • SHA256 d3319564d13ff1404b13dad0aa1573ae2d7b81a862b68a8f5c27c856b3900a22
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      axontweakspatch/launch.bat
    • Size 3KB
    • SHA256 0ce99026f534eb9f6763c9df0bf27117dac8a09d82ea866ef1831ca8f5c81fc8
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Drops file in Drivers directory

    • Target
      axontweakspatch/server.js
    • Size 5KB
    • SHA256 54b3aa7b7529e1bd650339af543fa7c10d28a6d983b28d82cfcbfee916f6a634
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      axontweakspatch/uninstall.bat
    • Size 1KB
    • SHA256 3eeb6f5aa23ee4549ac632cf5eaa501df8637949d77e7c8b70d1c7e1b53a1a46
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    • Drops file in Drivers directory

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

MITRE ATT&CK Enterprise v16

Tasks