b6cea51856b8a65cc27d4ead0474df1975dff69f438d6647cdf99e24a6670b1a

General

Target
update.zip
Size 812KB
Sample260817-wl38dsfk4y
SHA256 b6cea51856b8a65cc27d4ead0474df1975dff69f438d6647cdf99e24a6670b1a
MD5 ce176366d3ada881ffcb0984a2a2ba23
SHA1 eb7255d7249a9470beffe3c91201d44a66ea3472
SHA512 0324621304bc907674395190eee44f1702b27b8edeff3e44c354cdf828959472b6dbbdb55fd3714bff837d533e8ff6e3a332bfc92972ebd1fbe90d42d02b2e0b
SSDEEP 12288:s/LpXHVH7DkvRmOZMLDQ84NqFKNyyvSk+qJewNP3fC7xXW9OjZNgfYmmmmmmmmmS:s/5H57gvRm4M3gkoOYFP+hWeefZhK
TLSH
T14E05129B2F2E1B5F24A6946E58014A63FF6917E5C8638DE24DF70FCE140742919E0FAC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Malware Config

Targets

- Target
  1.bat
- Size 1KB
- SHA256 95ea4d56416f4c1f4dfebb08b6494a47700e654efc56f406266511d5915cd4ff
- MD5 c244a97dfaabf6c4a409a16056506d0e
- SHA1 7bf2f9bff15439d2a5652a912a2bbc5aecba21a4
- SHA512 7ee4d6601db8263997198d654270cfd663cc1cda06ed13a408bc9cc549a75d78fa4ec0a2605cac23fb1aeacfc16aa07f8fb169ba4f6d584bc41b415f37560ef7
- TLSH
  T168213229751805256C20E372839657A3F979235F16203A6FB0E68075279E3544BF65CF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  LockScreenContentServer.exe
- Size 48KB
- SHA256 de9d325af3156232c34916840210efb5706d6e6a5eba1827c8240e4f71c09fa2
- MD5 2cf29ef0ae66fcea7056ae948ffd9541
- SHA1 3d493a1afae9b38d3c0953016a00ef3d9ac514a0
- SHA512 3fd5a0c603ef7630adfc10e69de373aeb66df75f1830cbe83c68df59cbd27bdbe3fe7394a0549ebf8470b48ad207b122acddddc4c0cb1a3ef5e253a462e5fe4b
- SSDEEP 768:eQvZAVIG7PsefP8lAd7MtCwIpS9SL4WZwWCXeG1Po9zvR:ZvIIgL5ta+YFWZwWgeePgzZ
- TLSH
  T1D6233A49ABBA10C1E5ADD23C606A420AF476F262570706EF5199C33C5F73FD4AE39B81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral3
- Target
  dui70.dll
- Size 2.1MB
- SHA256 6350b70afa04cd1781d35e793614c41f1b1c41ca119c108bba0f6ac56868f219
- MD5 799f908e5d8ea79dacaa267ff957cefe
- SHA1 b85724549071c2744f5b407acd4b0fe9c748c4cd
- SHA512 909bd9ac5447b42909ea561ebebafb622cfc6263e48d873a020af9f0ef22177d935636a8a2efcd820960a504058f7a6b409740be642eedf9bf7ec8f8f7a656fa
- SSDEEP 24576:/SGu7mMJjwtE/v50t/6/Vax3Bc/Tjd2kJKx2ozdoYq9tBGn:/JimMJj6E/c6U9BcLjd2kcxVqVw
- TLSH
  T15BA57C0AB3F80456C19EE23DD59F460AE7F3B900176A96CF165D036CAE23FD1663A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

Windows Command Shell

1

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4