General

  • Target
    run.ps1
  • Size 50B
  • Sample261009-vmv3qs1vdv
  • SHA256 948b12c7859fef2cb0cc85cea19d11a1fb9d9ed88ad75db8454e7bbb243658b6
  • MD5 SHA1 SHA512 TLSH

Malware Config

Targets

    • Target
      run.ps1
    • Size 50B
    • SHA256 948b12c7859fef2cb0cc85cea19d11a1fb9d9ed88ad75db8454e7bbb243658b6
    • MD5 SHA1 SHA512 TLSH
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks