Extracted

• • Target
    file.exe
  • Size 10.3MB
  • SHA256 e8ee48d5a7c6f7773aafa2350ec4c07502efc5201ac6a2949f505d243f7308da
  • MD5 680a3c401a27ebc2f384fed8279aa810
  • SHA1 c0c7975879a282503f83adf63957b5fc61befe4b
  • SHA512 3c7224201a730720b41dd54820057f7ce1d20554e27e043bbf817ecfc6e4fb59932ea5a0b03f0f9caff8a5c669f61864329285aee0e1c8d759b9152bdf24632b
  • SSDEEP 98304:fdUX9exwsWfW3zdgemBWZk9lE0P2A5kVTUf6rKDEIt:10XO3zd80k99X5fAtI
  • TLSH
    T159B64907FDA550E9C0AEC13489AA9612BF727C490B7127C71B50F6242F77BE06EB9790
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  6^/10

  defense_evasiondiscoveryexecutiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution

  • Network Share Discovery

    Attempt to gather information on host network.

    discovery

  • Drops file in System32 directory

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral1