General
- Target 5b0ac2405e104b4ec7b62e896187daa5a7616e4ad1b2379b850605d727de70c8
- Size 356KB
- Sample260825-lp2tmawwht
- SHA256 5b0ac2405e104b4ec7b62e896187daa5a7616e4ad1b2379b850605d727de70c8
Score
8/10
Malware Config
Targets
-
- Target deploy.bat
- Size 809B
- SHA256 95b887f9498307dee34029cdc7f2993559e554099f916b5c7e80e749ff3c957d
Score3/10 -
- Target deploy.ps1
- Size 15KB
- SHA256 173f996f6fdf735e1550ca5f67a43869a2a398158be927eff1d0d9642745edc2
Score3/10 -
- Target [email protected]
- Size 96KB
- SHA256 4f64ab6d87a793479d1f75da19a4985c9cdb43acd8e76e2cc39a1ba460a576af
Score3/10 -
- Target [email protected]
- Size 424KB
- SHA256 6e750c3ae358cafbf51fa466146215f251aba98939fadfa1e526eb76eef0d63a
Score6/10-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
- Target [email protected]
- Size 423KB
- SHA256 a725172698714e30889344033c5e1a369094539443c16f342882aa407d38ea45
Score3/10 -
- Target [email protected]
- Size 742KB
- SHA256 536a9c108fa052f7849e9e518dd5417fb95cc3717d9c1732babd13ec60155009
Score3/10 -
- Target [email protected]
- Size 666KB
- SHA256 7f8370bf084f072cbb4c7610c03ce968c57750577aff45179fcfefdfe789473c
Score3/10 -
- Target restart_explorer.bat
- Size 433B
- SHA256 fb4ba0502954fb6c07cedd26b4ff82f0075437b6137bb6f2197d444e7a66c573
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Tasks
static1
Score
1/10
behavioral1
Score
3/10
behavioral2
Score
3/10
behavioral3
Score
3/10
behavioral4
Score
3/10
behavioral5
Score
3/10
behavioral6
Score
3/10
behavioral7
Score
6/10
behavioral8
Score
6/10
behavioral9
Score
3/10
behavioral10
Score
3/10
behavioral11
Score
3/10
behavioral12
Score
3/10
behavioral13
Score
3/10
behavioral14
Score
3/10
behavioral15
Score
8/10
behavioral16
Score
8/10