General
- Target Details of abnormal invoice verification.bat
- Size 4KB
- Sample260826-mat1xacf99
- SHA256 ec52839369a268486f70a4a45333badd8ccb7aa1b21a4f608abb39dd5ccd0898
Score
8/10
Malware Config
Targets
-
- Target Details of abnormal invoice verification.bat
- Size 4KB
- SHA256 ec52839369a268486f70a4a45333badd8ccb7aa1b21a4f608abb39dd5ccd0898
Score8/10-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
Indicator Removal: Network Share Connection Removal
Adversaries may remove share connections that are no longer useful in order to clean up traces of their operation.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1