Overview

overview

3

Static

static

3

AFind.exe

windows10-2004-x64

3

AFind.exe

windows11-ltsc_2024-x64

3

Audited.exe

windows10-2004-x64

3

Audited.exe

windows11-ltsc_2024-x64

3

DACLchk.exe

windows10-2004-x64

3

DACLchk.exe

windows11-ltsc_2024-x64

3

FileStat.exe

windows10-2004-x64

3

FileStat.exe

windows11-ltsc_2024-x64

3

HFind.exe

windows10-2004-x64

3

HFind.exe

windows11-ltsc_2024-x64

3

Hunt.exe

windows10-2004-x64

3

Hunt.exe

windows11-ltsc_2024-x64

3

SFind.exe

windows10-2004-x64

3

SFind.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    ForensicToolkit20.zip
  • Size 336KB
  • Sample260827-rgl14avvas
  • SHA256 c6cb26031839673c7094b93ea3a7f2e668ef89595a05fdaa33e9aabcad79706c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
discovery

Malware Config

Targets

    • Target
      AFind.exe
    • Size 57KB
    • SHA256 99d0736aac2c9ad0de6fcb4b7ed01eb9d3cd041b90a60ed6070b3cdd7778ab42
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral1behavioral2
    • Target
      Audited.exe
    • Size 185KB
    • SHA256 f3928286bbbc03fe16c90ff7546898322e3f1a890bae71c827f68da21d68f15b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      DACLchk.exe
    • Size 182KB
    • SHA256 ac4de44165eaf39e45cd0183267c017b6b46cf0e1d70cf9b6d6008249a6f237a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      FileStat.exe
    • Size 102KB
    • SHA256 9186ede0bbb7edd46eb167e65c70eb37ebac5129df7cbd1e243511cd61aa7ee3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral7behavioral8
    • Target
      HFind.exe
    • Size 50KB
    • SHA256 054a593b9fef28c0e6d9e41e5c5dfb3d136d8dc06d2d52617046496bf48fbe19
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral10behavioral9
    • Target
      Hunt.exe
    • Size 42KB
    • SHA256 5c12074906accd44d78e30a8a7f0c9f0e8d4beab7c7220e8172e121986a6c1fa
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral11behavioral12
    • Target
      SFind.exe
    • Size 50KB
    • SHA256 3cad750eab3ca42469bb6a869d93eaa0c1e59b91bed4f270379d85b2771cc522
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral13behavioral14

MITRE ATT&CK Enterprise v16

Tasks