18f9e2d9fb94bc766ef5fb0ad6de45ba4635ab731f1f2e0cc03fca2d4c207744

Sharing

Copy URL Twitter E-mail

General

Target
2705b11baee24c349723f25a36e60f0a5368235f33.zip
Size 2.6MB
Sample261002-m2ncfaha58
SHA256 18f9e2d9fb94bc766ef5fb0ad6de45ba4635ab731f1f2e0cc03fca2d4c207744
MD5 194baecfcde12a9185c22628934e9b2c
SHA1 757ae1abc1d6e851a22e3a9c2995e160b83f799e
SHA512 e6973e86ccb383950b64f6901b5d93dc00c890c764402eb52a79ac8913532d49a35a055299e24ac62e30fa41304b98170d2df514ea72d7de88e2160fdbb7cc95
SSDEEP 49152:JtERnSGGKr7ml9cJ09qFjgqCo7mijF3cblI+L4UTcK38KaGS5DJcn6o:Jt6FG99cJQqFkNraFs5XL4UqKarFJcnF
TLSH
T11AC5332DEA9E1D38AF8FA1D62957D8DFDC0D92655E03C30B1B9581E0114027BEDFAC94
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution upx

Malware Config

Targets

- Target
  amz(Copy 10).bat
- Size 144B
- SHA256 a8492870164796ca0a31571503d8bae46236df249f2581e968bd6edc9cbc9014
- MD5 fa9c50eb5b50eb686a48a2d144e89ea9
- SHA1 82c3757b1942945645c235dfe5f53145ea194708
- SHA512 7c1712dbd8dd0c364b94ae48cd05a75548f2ce381553dcee7646d4b25f5b2f151634cf507f5f907da6aee50dc7f55a21fb4b8bf4494f32cc2ccc3f46e31c8470
- TLSH
  T164C02B6D430D46F0130D9890E7A00D2C691F377CFA3309302E4D7540F2C6F2C8011193
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  amz(Copy 11).bat
- Size 144B
- SHA256 a8492870164796ca0a31571503d8bae46236df249f2581e968bd6edc9cbc9014
- MD5 fa9c50eb5b50eb686a48a2d144e89ea9
- SHA1 82c3757b1942945645c235dfe5f53145ea194708
- SHA512 7c1712dbd8dd0c364b94ae48cd05a75548f2ce381553dcee7646d4b25f5b2f151634cf507f5f907da6aee50dc7f55a21fb4b8bf4494f32cc2ccc3f46e31c8470
- TLSH
  T164C02B6D430D46F0130D9890E7A00D2C691F377CFA3309302E4D7540F2C6F2C8011193
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral3 behavioral4
- Target
  amz(Copy 12).bat
- Size 144B
- SHA256 a8492870164796ca0a31571503d8bae46236df249f2581e968bd6edc9cbc9014
- MD5 fa9c50eb5b50eb686a48a2d144e89ea9
- SHA1 82c3757b1942945645c235dfe5f53145ea194708
- SHA512 7c1712dbd8dd0c364b94ae48cd05a75548f2ce381553dcee7646d4b25f5b2f151634cf507f5f907da6aee50dc7f55a21fb4b8bf4494f32cc2ccc3f46e31c8470
- TLSH
  T164C02B6D430D46F0130D9890E7A00D2C691F377CFA3309302E4D7540F2C6F2C8011193
- MD5 SHA1 SHA512 TLSH
Score

N/A
behavioral5 behavioral6
- Target
  amz(Copy 13).bat
- Size 144B
- SHA256 a8492870164796ca0a31571503d8bae46236df249f2581e968bd6edc9cbc9014
- MD5 fa9c50eb5b50eb686a48a2d144e89ea9
- SHA1 82c3757b1942945645c235dfe5f53145ea194708
- SHA512 7c1712dbd8dd0c364b94ae48cd05a75548f2ce381553dcee7646d4b25f5b2f151634cf507f5f907da6aee50dc7f55a21fb4b8bf4494f32cc2ccc3f46e31c8470
- TLSH
  T164C02B6D430D46F0130D9890E7A00D2C691F377CFA3309302E4D7540F2C6F2C8011193
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral7 behavioral8
- Target
  amz(Copy 14).bat
- Size 144B
- SHA256 a8492870164796ca0a31571503d8bae46236df249f2581e968bd6edc9cbc9014
- MD5 fa9c50eb5b50eb686a48a2d144e89ea9
- SHA1 82c3757b1942945645c235dfe5f53145ea194708
- SHA512 7c1712dbd8dd0c364b94ae48cd05a75548f2ce381553dcee7646d4b25f5b2f151634cf507f5f907da6aee50dc7f55a21fb4b8bf4494f32cc2ccc3f46e31c8470
- TLSH
  T164C02B6D430D46F0130D9890E7A00D2C691F377CFA3309302E4D7540F2C6F2C8011193
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral10 behavioral9
- Target
  amz(Copy 15).bat
- Size 144B
- SHA256 a8492870164796ca0a31571503d8bae46236df249f2581e968bd6edc9cbc9014
- MD5 fa9c50eb5b50eb686a48a2d144e89ea9
- SHA1 82c3757b1942945645c235dfe5f53145ea194708
- SHA512 7c1712dbd8dd0c364b94ae48cd05a75548f2ce381553dcee7646d4b25f5b2f151634cf507f5f907da6aee50dc7f55a21fb4b8bf4494f32cc2ccc3f46e31c8470
- TLSH
  T164C02B6D430D46F0130D9890E7A00D2C691F377CFA3309302E4D7540F2C6F2C8011193
- MD5 SHA1 SHA512 TLSH
Score

N/A
behavioral11 behavioral12
- Target
  amz(Copy 16).bat
- Size 144B
- SHA256 a8492870164796ca0a31571503d8bae46236df249f2581e968bd6edc9cbc9014
- MD5 fa9c50eb5b50eb686a48a2d144e89ea9
- SHA1 82c3757b1942945645c235dfe5f53145ea194708
- SHA512 7c1712dbd8dd0c364b94ae48cd05a75548f2ce381553dcee7646d4b25f5b2f151634cf507f5f907da6aee50dc7f55a21fb4b8bf4494f32cc2ccc3f46e31c8470
- TLSH
  T164C02B6D430D46F0130D9890E7A00D2C691F377CFA3309302E4D7540F2C6F2C8011193
- MD5 SHA1 SHA512 TLSH
Score

N/A
behavioral13 behavioral14
- Target
  amz(Copy 17).bat
- Size 144B
- SHA256 a8492870164796ca0a31571503d8bae46236df249f2581e968bd6edc9cbc9014
- MD5 fa9c50eb5b50eb686a48a2d144e89ea9
- SHA1 82c3757b1942945645c235dfe5f53145ea194708
- SHA512 7c1712dbd8dd0c364b94ae48cd05a75548f2ce381553dcee7646d4b25f5b2f151634cf507f5f907da6aee50dc7f55a21fb4b8bf4494f32cc2ccc3f46e31c8470
- TLSH
  T164C02B6D430D46F0130D9890E7A00D2C691F377CFA3309302E4D7540F2C6F2C8011193
- MD5 SHA1 SHA512 TLSH
Score

N/A
behavioral15 behavioral16
- Target
  amz(Copy 18).bat
- Size 144B
- SHA256 a8492870164796ca0a31571503d8bae46236df249f2581e968bd6edc9cbc9014
- MD5 fa9c50eb5b50eb686a48a2d144e89ea9
- SHA1 82c3757b1942945645c235dfe5f53145ea194708
- SHA512 7c1712dbd8dd0c364b94ae48cd05a75548f2ce381553dcee7646d4b25f5b2f151634cf507f5f907da6aee50dc7f55a21fb4b8bf4494f32cc2ccc3f46e31c8470
- TLSH
  T164C02B6D430D46F0130D9890E7A00D2C691F377CFA3309302E4D7540F2C6F2C8011193
- MD5 SHA1 SHA512 TLSH
Score

N/A
behavioral17 behavioral18
- Target
  amz(Copy 19).bat
- Size 144B
- SHA256 a8492870164796ca0a31571503d8bae46236df249f2581e968bd6edc9cbc9014
- MD5 fa9c50eb5b50eb686a48a2d144e89ea9
- SHA1 82c3757b1942945645c235dfe5f53145ea194708
- SHA512 7c1712dbd8dd0c364b94ae48cd05a75548f2ce381553dcee7646d4b25f5b2f151634cf507f5f907da6aee50dc7f55a21fb4b8bf4494f32cc2ccc3f46e31c8470
- TLSH
  T164C02B6D430D46F0130D9890E7A00D2C691F377CFA3309302E4D7540F2C6F2C8011193
- MD5 SHA1 SHA512 TLSH
Score

N/A
behavioral19 behavioral20
- Target
  amz(Copy 2).bat
- Size 144B
- SHA256 a8492870164796ca0a31571503d8bae46236df249f2581e968bd6edc9cbc9014
- MD5 fa9c50eb5b50eb686a48a2d144e89ea9
- SHA1 82c3757b1942945645c235dfe5f53145ea194708
- SHA512 7c1712dbd8dd0c364b94ae48cd05a75548f2ce381553dcee7646d4b25f5b2f151634cf507f5f907da6aee50dc7f55a21fb4b8bf4494f32cc2ccc3f46e31c8470
- TLSH
  T164C02B6D430D46F0130D9890E7A00D2C691F377CFA3309302E4D7540F2C6F2C8011193
- MD5 SHA1 SHA512 TLSH
Score

N/A
behavioral21 behavioral22
- Target
  amz(Copy 20).bat
- Size 144B
- SHA256 a8492870164796ca0a31571503d8bae46236df249f2581e968bd6edc9cbc9014
- MD5 fa9c50eb5b50eb686a48a2d144e89ea9
- SHA1 82c3757b1942945645c235dfe5f53145ea194708
- SHA512 7c1712dbd8dd0c364b94ae48cd05a75548f2ce381553dcee7646d4b25f5b2f151634cf507f5f907da6aee50dc7f55a21fb4b8bf4494f32cc2ccc3f46e31c8470
- TLSH
  T164C02B6D430D46F0130D9890E7A00D2C691F377CFA3309302E4D7540F2C6F2C8011193
- MD5 SHA1 SHA512 TLSH
Score

N/A
behavioral23 behavioral24
- Target
  amz(Copy 21).bat
- Size 144B
- SHA256 a8492870164796ca0a31571503d8bae46236df249f2581e968bd6edc9cbc9014
- MD5 fa9c50eb5b50eb686a48a2d144e89ea9
- SHA1 82c3757b1942945645c235dfe5f53145ea194708
- SHA512 7c1712dbd8dd0c364b94ae48cd05a75548f2ce381553dcee7646d4b25f5b2f151634cf507f5f907da6aee50dc7f55a21fb4b8bf4494f32cc2ccc3f46e31c8470
- TLSH
  T164C02B6D430D46F0130D9890E7A00D2C691F377CFA3309302E4D7540F2C6F2C8011193
- MD5 SHA1 SHA512 TLSH
Score

N/A
behavioral25 behavioral26
- Target
  amz(Copy 22).bat
- Size 144B
- SHA256 a8492870164796ca0a31571503d8bae46236df249f2581e968bd6edc9cbc9014
- MD5 fa9c50eb5b50eb686a48a2d144e89ea9
- SHA1 82c3757b1942945645c235dfe5f53145ea194708
- SHA512 7c1712dbd8dd0c364b94ae48cd05a75548f2ce381553dcee7646d4b25f5b2f151634cf507f5f907da6aee50dc7f55a21fb4b8bf4494f32cc2ccc3f46e31c8470
- TLSH
  T164C02B6D430D46F0130D9890E7A00D2C691F377CFA3309302E4D7540F2C6F2C8011193
- MD5 SHA1 SHA512 TLSH
Score

N/A
behavioral27 behavioral28
- Target
  amz(Copy 23).bat
- Size 144B
- SHA256 a8492870164796ca0a31571503d8bae46236df249f2581e968bd6edc9cbc9014
- MD5 fa9c50eb5b50eb686a48a2d144e89ea9
- SHA1 82c3757b1942945645c235dfe5f53145ea194708
- SHA512 7c1712dbd8dd0c364b94ae48cd05a75548f2ce381553dcee7646d4b25f5b2f151634cf507f5f907da6aee50dc7f55a21fb4b8bf4494f32cc2ccc3f46e31c8470
- TLSH
  T164C02B6D430D46F0130D9890E7A00D2C691F377CFA3309302E4D7540F2C6F2C8011193
- MD5 SHA1 SHA512 TLSH
Score

N/A
behavioral29 behavioral30
- Target
  amz(Copy 24).bat
- Size 144B
- SHA256 a8492870164796ca0a31571503d8bae46236df249f2581e968bd6edc9cbc9014
- MD5 fa9c50eb5b50eb686a48a2d144e89ea9
- SHA1 82c3757b1942945645c235dfe5f53145ea194708
- SHA512 7c1712dbd8dd0c364b94ae48cd05a75548f2ce381553dcee7646d4b25f5b2f151634cf507f5f907da6aee50dc7f55a21fb4b8bf4494f32cc2ccc3f46e31c8470
- TLSH
  T164C02B6D430D46F0130D9890E7A00D2C691F377CFA3309302E4D7540F2C6F2C8011193
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

UPX packed file

UPX packed file

UPX packed file

UPX packed file

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32