358107b85ea6259258520ca25887017516096597835fff4a822e1ee34e1724f4

General

Target
宏表格-一键安装包.zip
Size 261KB
Sample260909-ppx28acb65
SHA256 358107b85ea6259258520ca25887017516096597835fff4a822e1ee34e1724f4
MD5 44c1f3d07395e40e56f99a01fc95a75b
SHA1 c4aad6c7e09a7d3ffc1736d385b5ef84437e9c7a
SHA512 3c85b47c1ecc5dec4a7fe62b3004f71cfc80ea12dfa905241beb6f60bf475152e99317ca4871ab5a904f1720498f17d7548a8cc6c06aed1a87cb4afea49e3561
SSDEEP 6144:fFge1rFsoTLvzHzFrhuaSzhEZXSrKc41ImovCfG7p7YIiUI:fFNFsoTLbxrgavSOc41I3vL7I
TLSH
T18044233EF21C8196F1083DC98B1E7E5396CDDDDA15F022C268F1628535BE7EB22E0A15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  install-runner.ps1
- Size 3KB
- SHA256 53ac2df0f1891f4e542a047b0e5700e4ade3be70c4ce2efb44922bb7e26e1d08
- MD5 c7cf7a88041f79629df1bd5de1dd81ad
- SHA1 93d34a271357bcbecbd04e3755baa958bec0eee9
- SHA512 db3daaeb624fad40ff48f1033cb32f3f1cf03a61addd9ece66ac81e8d7938bc04de7b553bca49ca9541665112e2db2ac92e6fd64e64e664e15833f318cc5cdbb
- TLSH
  T1D47187288490188EAA73129B51C6238CFC2E4975C67A1AC0ED78E85139C373E4B665F3
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  安装宏表格运行器.cmd
- Size 480B
- SHA256 844953089bddff9bcc52ec5d98ac98d5db114a02f0185091cf4d383bf715894c
- MD5 b874fb716f933e31a43f7779e59411f3
- SHA1 f54de664e6638183790ce88adc22b9a15fe3187d
- SHA512 391f85da3fce21a5428e7916c78df0c391f42596d71f0c0288558a1fa4fd9fdc18f0704945e404594cd8c5b2f8cab74bd1549f1df9fdae411f138cde99f608e8
- TLSH
  T1A9F0AB87B324D279218B4FEE8D22B0903C18A08F02060DE6A08B0124370C7EEFBCA745
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  宏表格运行器.exe
- Size 279KB
- SHA256 b106229eab94e3c6d0eb0ec93a990d65f7eff34ef706faa3ff8965be5746c8d2
- MD5 11da1b4806fa0ccc10956561b9714e2a
- SHA1 72f3a4829de20f2e76472a7699923edee5a7b9db
- SHA512 d9bdc2e02730d3bcd73f3071c9e451e692354eb1ab184c3b8af6188ae91bbc6fda4d5661caa3f1fb50f75d0989d215d6ef345414a2b7eae1d46a0265571868cd
- SSDEEP 3072:5hDZEPDeBuQMoVJhpq8iJLs8nM8IA6oPFsNXWXVrqcU7AGImIPqWNjZGu30a/rjT:5hDmI5Mo7JGUiGNXSrqc41ImwdkS6Bv
- TLSH
  T10F54022191264935C603B87D221C4B47A9AE714285D3F89F2E709AB535D7E830FDE9CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

2

T1059

PowerShell

1

T1059.001

Windows Command Shell

1

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6