General

  • Target
    Nuovo Documento di testo.txt
  • Size 197B
  • Sample261017-v428daxset
  • SHA256 e5337d87ae5f522a57fabf0161364e40426b7e63f39a0919912bb8617120f973
  • MD5 SHA1 SHA512 TLSH
Score
8/10

Malware Config

Targets

    • Target
      Nuovo Documento di testo.txt
    • Size 197B
    • SHA256 e5337d87ae5f522a57fabf0161364e40426b7e63f39a0919912bb8617120f973
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Suspicious clipboard content.

      A suspicious script was copied to clipboard.

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks