General

  • Target
    fuck you mr.best.rar
  • Size 10KB
  • Sample260822-cam79avsdy
  • SHA256 eced75c6d46e6370f24eebbfca754599bbb6df3b0e2220fdf31225f33e858e7f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10

Malware Config

Targets

    • Target
      fuck you mr.best/README.md
    • Size 256B
    • SHA256 3c4782d46aec5b6ee3cca21fbecf58b06f2cfcfa1da7184ff553dadff46e7943
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      fuck you mr.best/defender.ps1
    • Size 29KB
    • SHA256 3b39341c09d8d40661e1275171d2ab6a519f25c33070186ca07bd01720d8c0cd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      fuck you mr.best/start.bat
    • Size 1KB
    • SHA256 a4a86f46051a938dea153cfe4cfb3e3c3cd110db798d61e4671f8d19137a24ef
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Modifies file permissions

    • Target
      fuck you mr.best/status.bat
    • Size 109B
    • SHA256 b15613e6658a554607d99465fa697d912f87688e17651257b6fa89b08109321a
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      fuck you mr.best/uninstall.bat
    • Size 293B
    • SHA256 95fd2088bc357d93d405d1622b65bcf658182f8151251907ee734b8117ed1fa5
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks