General
- Target Project_v1.2.4.windows-x64.exe
- Size 80.1MB
- Sample260908-tts2aaem91
- SHA256 b2a566ba1fc85d309fcc4aff31e05515773b71a44a4929785d8b1df5c0631e9f
Score
8/10
Malware Config
Targets
-
- Target Project_v1.2.4.windows-x64.exe
- Size 80.1MB
- SHA256 b2a566ba1fc85d309fcc4aff31e05515773b71a44a4929785d8b1df5c0631e9f
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Executes dropped EXE
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target Installer.exe
- Size 168.1MB
- SHA256 f1fdb3e045eff53d860bb757980dd194b392910fc8a9b640bae912388cda9c4c
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Executes dropped EXE
-
Indirect Command Execution
Adversaries may abuse utilities that allow for command execution to bypass security restrictions that limit the use of command-line interpreters.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target resources/elevate.exe
- Size 105KB
- SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
Score3/10
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1