192cd38ba857489d3976749ab27ec5f1b5744d97a19ddaaf9fa876e69c484bf2

General

Target
Rainbow Six $300 Ext.zip
Size 37.4MB
Sample260816-thephsdr7x
SHA256 192cd38ba857489d3976749ab27ec5f1b5744d97a19ddaaf9fa876e69c484bf2
MD5 a64fb5b0b0bae3119c8d3e241c38a0f7
SHA1 60bf146246f430f79e1c279bbc4d4233488bdc76
SHA512 717b94444de6d5622fd190fc47c8086811c82363885cbcdc7c78d467b86668e6523f5259d187891fd3d329e2b1fb3ebfc7555b239737e5a2a8bbbabfba5625eb
SSDEEP 786432:IFKFuyXi8EF1ft8ncUlnj3I1tOKxc10rus2+frh2zO84fzW:IF0s2njktOKUY1F2q5W
TLSH
T15C87338FDD9D170ED4177AB0A8B5E3EC87DE26088A009E6BF350D448851E391EB5D4EE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  buttpaste/Source/Zydis/fix_include.ps1
- Size 337B
- SHA256 d7a15f493f788267e899ee2659dd53419968a9befaf388197e2666bab88ae702
- MD5 eaa86a4f69b293d16c263c7603cc4313
- SHA1 c8c154e70f9f88cf48e20577fb01ca8d157033fb
- SHA512 30955c474ba81527e35deaeb9de9f68da5419aa49f7dcf3ec02f44f0ad65435f58917e7e1daafd005e898e0af8c91e35ab637dec7bc4ccc14b2fa5470b4a7aae
- TLSH
  T1B2E0D861F1691C4804E19144329AC04150273133FC4F092CC0769586F28B5EF05BECFE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1
- Target
  buttpaste/Source/Zydis/fix_include2.ps1
- Size 234B
- SHA256 7a67c6999d5f8882c2bd30aac28f26140e10585d67f04961f3d2ed1cb34c7c63
- MD5 695f5eece33d63e437bb1d7a6b590df6
- SHA1 bea2665bed08ea3b7b19c906eb779992c28d8bda
- SHA512 9b0a21011dc9e28d0e581c1589cf7b88908ab6ebd086f829c9620ef3ad39d1829e71234ffd4cbb794e28d43dd6b0ca57fed4925f5dfdfe2328c57bb890e097d9
- TLSH
  T13AD02B70B25508480545D0063184F58040662121E50A191D44169249F1CA36E3AEFD4D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral2
- Target
  buttpaste/Source/Zydis/fix_vcxproj.ps1
- Size 750B
- SHA256 af2958b5e6d57fadde3321334fc552e9050ce3c7fd582cff1a6e573db6f3bb81
- MD5 e632e35b54e702f4613d63804bfd1416
- SHA1 16773f6c479055264ae6f41ee1dd5c66c1c1d306
- SHA512 ace6e359e00c9678d326c4b1cae1374193dd6ddafb054893a4d7d15a310534a98de0bc3df4b91a1c81d78b310e018de96195c6edfcdf1738038618b3b1c11c9d
- TLSH
  T120016D30520A894EB673E9A2729D7E26542AD531F019272ADAD0890924C43BF19DF33B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3
- Target
  buttpaste/Source/Zydis/fix_wpo.ps1
- Size 354B
- SHA256 7eaa1708aa2ed4890975955b25dfc4c8899e1f2bcdef1c31d836e8e98f6a5e20
- MD5 c4d0701418e5f6061b596e0ee0434f69
- SHA1 d355950928db99b74859a54a2aa2950dbc2cb10a
- SHA512 4af1f1a7c4eec3d6830d9205d0612826192b519139046c253db48944a8be818b2e0848bb420a724fe6270358eb8deb5bf5674cd3be1fda56e2563ee804cf2ca4
- TLSH
  T17FE01270D64049DC89A3953B26106D564371CD10F4491827C8E0E22E90C674967EB67A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral4
- Target
  buttpaste/Source/Zydis/fix_zydis.ps1
- Size 973B
- SHA256 2260b3de7d30f51b301bd89c0efe67c84c3dee8bfbac67b934520ee8d184f82a
- MD5 ad6f2868eeb8532732c25e149787bd4e
- SHA1 4beb589f1ceae417139f80438712af89804703f1
- SHA512 221f67be7390a5b6d05c686bd195b5d2a119e865e3c3fa1a984f6a220af0240d320edf0cfb60d35318a4e95b1389f92d9cbb2bc93d4094cfda0f60c9394afc8a
- TLSH
  T1B211BD7DF9005C9B0333E46FA1347D406936D539F20AED539888D1ACB5D23C9C4E260E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

PowerShell

1

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5