391c40da6e59128d9cc46e0e64bb5c3f5a55258a068dec4e21759332fe0ad907

General

Target
update.zip
Size 824KB
Sample260825-evpb6afh37
SHA256 391c40da6e59128d9cc46e0e64bb5c3f5a55258a068dec4e21759332fe0ad907
MD5 670869858f7ab6a9ebfdf2d55fa9d2ed
SHA1 be16466cbd05d9c171a742546dfc60cd59e0c204
SHA512 53742aa4991f5e399d7b3ec3c68b198af051495410433f70f0d4353492b932f56e92c29a6a320cdb6874707d54b619eb3e225d702b7981e1f2dfaeac1419055d
SSDEEP 24576:RLB4QCDL1rPnAd4nnhDi6HjbuiWxVP4PzyP:RB4Qg1rPA2nhDiCkv4PzyP
TLSH
T11405128A5DEFCA1E094DD8C54B9E067B7E8903C4CDD77B826BF4884E205B527B0E0B95
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Malware Config

Targets

- Target
  1.bat
- Size 1KB
- SHA256 cdc4870acc33a15adab6f45355a7b39d9cf61d3ebab226ec3381f46d71007f76
- MD5 ba9c07dabba73fb11be986947a3e9b30
- SHA1 0ef635f71e2a4affafd8b0537f95eafbc969fa4e
- SHA512 804a9805305475daa9b0e5d83200e221012214e8bd8d0a5d618bb50165ff869eab08708a1b40fd0e49cb6b0ac9fca3731361b1faf920f7a0f7db9929afa7e52f
- TLSH
  T14C21322A740405392C20D27283969767F979136F063039AFB4A9C0B627DE35147F69CA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  LockScreenContentServer.exe
- Size 48KB
- SHA256 de9d325af3156232c34916840210efb5706d6e6a5eba1827c8240e4f71c09fa2
- MD5 2cf29ef0ae66fcea7056ae948ffd9541
- SHA1 3d493a1afae9b38d3c0953016a00ef3d9ac514a0
- SHA512 3fd5a0c603ef7630adfc10e69de373aeb66df75f1830cbe83c68df59cbd27bdbe3fe7394a0549ebf8470b48ad207b122acddddc4c0cb1a3ef5e253a462e5fe4b
- SSDEEP 768:eQvZAVIG7PsefP8lAd7MtCwIpS9SL4WZwWCXeG1Po9zvR:ZvIIgL5ta+YFWZwWgeePgzZ
- TLSH
  T1D6233A49ABBA10C1E5ADD23C606A420AF476F262570706EF5199C33C5F73FD4AE39B81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral3
- Target
  dui70.dll
- Size 2.1MB
- SHA256 efb2f77ac0ffa7ea9dfd17e8f861127990090c6144d8d9a6c551ecbf3c510711
- MD5 765252c45f5e8a541e7df35cfc330a66
- SHA1 21d718d7fe5d4681afd962ceeaa2cf099d8dcd5f
- SHA512 85f23e5b816ecfa63eb32ee81cc7538c27d95b2df1344158533babeb89a5e29115de79f6da37dcf837f902df7301886684193e0b7ae85b880d2dbe82b7ddd813
- SSDEEP 24576:sSEu7mMJjwtE/v50t/6/Vax3Bc/Tjd2kJKx2ozdoYq9tBGnLsfmBSspEV+2vsH:s7imMJj6E/c6U9BcLjd2kcxVqVw
- TLSH
  T145A57D1AB3F50555D1AEE23DD56F4A0EE2F37811132A82DF065C43AC9E23BD16A3A713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

Windows Command Shell

1

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4