f0c194e737ec798b5bf29ce51fa3d87e6fd82c4d16b7d25a21e4bbc3aacb9579

Sharing

Copy URL Twitter E-mail

General

Target
release.zip
Size 62.7MB
Sample261024-qjvkksh15s
SHA256 f0c194e737ec798b5bf29ce51fa3d87e6fd82c4d16b7d25a21e4bbc3aacb9579
MD5 b22e59086c4e8404c82f4a7693e99312
SHA1 fc30609388203aae0bfb099c18d1e1ee3367625a
SHA512 e1613a088cd2d0417e322289eb862b54fc6079a48e5d0d57799d531774e50a5805843f3b0bc64ac9cda0b28c0cb0a721b03eebb4173eec4112352f205d483628
SSDEEP 1572864:/ywEf677shLibc72Ic1VkyHKkBP2ZNkIqY6frVM+ZIXige+ZIow:hz77nk251CynBP2ZuycrVSigTw
TLSH
T123E733CCE215899ED62ADB3FA4B4059BF1F968110321C72D2B384572ADCF78A7F5E241
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Malware Config

Targets

- Target
  release.zip
- Size 62.7MB
- SHA256 f0c194e737ec798b5bf29ce51fa3d87e6fd82c4d16b7d25a21e4bbc3aacb9579
- MD5 b22e59086c4e8404c82f4a7693e99312
- SHA1 fc30609388203aae0bfb099c18d1e1ee3367625a
- SHA512 e1613a088cd2d0417e322289eb862b54fc6079a48e5d0d57799d531774e50a5805843f3b0bc64ac9cda0b28c0cb0a721b03eebb4173eec4112352f205d483628
- SSDEEP 1572864:/ywEf677shLibc72Ic1VkyHKkBP2ZNkIqY6frVM+ZIXige+ZIow:hz77nk251CynBP2ZuycrVSigTw
- TLSH
  T123E733CCE215899ED62ADB3FA4B4059BF1F968110321C72D2B384572ADCF78A7F5E241
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  release/DDNet-Server.exe
- Size 1.8MB
- SHA256 94977dad2276a2ff0cbedcfb35c9cd9f713fb0772bfd030e644d78608365a989
- MD5 5aa8212c196f1d81425ad73c13892eac
- SHA1 c566cc1a4c3b7fd482dc49582756e8fa2208a6ed
- SHA512 91bba2b2a93ef9baf3b070e2f40e452e4aea531a2be2a0d447f7e87aa5fc4659a920d14912dc7b8a8ac19c70cc72da18b8e0c7e52cf27c4783daaf138feefcc8
- SSDEEP 49152:HIkpyPfnhcyh47Dk2ze5w0bwP4ggYcrz:ok+fnidk2a5wcwPcr
- TLSH
  T1C5957C0677A551F9C57AC0388F436627FEB0B46C0364B6EB0AA0D6562F27FE41A7F205
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  release/DDNet.exe
- Size 17.7MB
- SHA256 73c91655e360d3947d27f26da92b02b950c738e937978689b069c189f8ef074f
- MD5 31903b968cf6a8e2cdc19d4493d3f943
- SHA1 fe6b38dd1d988551216844f0d5cd4f2fef5c7569
- SHA512 1caefb32c80b911a4c2cd4e0bbe6283f8c9592d8deca0ce4663c29eee9601ec8e10ae64c42e83ab3d5fde74ba0566173696939e80c276e38a5a3773abd7f3e70
- SSDEEP 98304:iDxD+ugYLtZ55jgDmXtzNOzZI9tCMSddI42ScL+5Cj1o5m2Si19vWvQrBjR9T17L:6G+McxQtm42SM+5Yi3wQrdB
- TLSH
  T177179E93B5C71CE9C993A77995DF6337B731BE1092246B635A04EA301EA36C0AF1B704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  release/SDL2.dll
- Size 2.2MB
- SHA256 7bc0c709cf91b257137e18703032525373ef7c0bef076657a2e1105e25ffe4c4
- MD5 1bdb67747a1ce573a0763f0d44639215
- SHA1 3600b07423a3793315a0b138b0a124e06a0cea39
- SHA512 69253f93415f030643ce8bcc1acf0395a436738e5d1f2fe6cdd861b4c785cdb4c356df4f4e9c064e53c09e5866d3edbafdf91fe7edd2f66444392c0df11d03ff
- SSDEEP 49152:B67hRG8vpHqRA9M/+AHfq23wWlLrBtDKyogIsiTwq8ABJXr6nvLXwSOYOJW:EhR9vRqbXAqLttDKAiEq8AfXr6zAPYOI
- TLSH
  T1A8B57E5FF2E364ECCB17C031826BE772A93074181194BDBB66D49B706E32E904B5EE25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  release/VoidClient.exe
- Size 17.7MB
- SHA256 73c91655e360d3947d27f26da92b02b950c738e937978689b069c189f8ef074f
- MD5 31903b968cf6a8e2cdc19d4493d3f943
- SHA1 fe6b38dd1d988551216844f0d5cd4f2fef5c7569
- SHA512 1caefb32c80b911a4c2cd4e0bbe6283f8c9592d8deca0ce4663c29eee9601ec8e10ae64c42e83ab3d5fde74ba0566173696939e80c276e38a5a3773abd7f3e70
- SSDEEP 98304:iDxD+ugYLtZ55jgDmXtzNOzZI9tCMSddI42ScL+5Cj1o5m2Si19vWvQrBjR9T17L:6G+McxQtm42SM+5Yi3wQrdB
- TLSH
  T177179E93B5C71CE9C993A77995DF6337B731BE1092246B635A04EA301EA36C0AF1B704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  release/avcodec-61.dll
- Size 2.7MB
- SHA256 58c71baa592da746c9c5e30fdd41814a2736454b2b7168da4ab88585758d4786
- MD5 ae6632db7de61ef9a0e1045b829502dc
- SHA1 e4c9eae709c3b3f415f9183e2e45292c14b9d5e2
- SHA512 37d112a490105d11283fab5a2febb618305919932bc18b55b79bc0d3ef862791d3f6f8cc6dfc57b00ce1fb7dc576c724dafbff84144212b247e51e265904c28f
- SSDEEP 49152:sG89fcQ/HjCDvYceJirwiucX2bpbsyt7U9gkUObKPHv5bW:he0Q/jYv8/NR1TdW
- TLSH
  T11ED59E4AE2B325ECC567C170976FE723FA70782C40247DBB5A90D6312E63F90661AF19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  release/avformat-61.dll
- Size 502KB
- SHA256 b72292ed8140957752e45880b597b6e1a673fb66e740379d29614dee1454d3a2
- MD5 179f9ae9eb9e05411966a0d943e75360
- SHA1 a543163fbea7ba8061da700133cc97e9ebcda589
- SHA512 ca77ce3fb5e345ea6304c9d405de577b164224df01ca25ce1ae560ab82463dfa6b0dacd6880d8d8821b15d3892f8d12bbee76832dee1cfef083b74f127949fc0
- SSDEEP 12288:vHoTMfa6+pLH1SicSrISTE6bj3tZEdEyd:vHp0HnHASfyd
- TLSH
  T15CB45A17D6A315ECC66BC13043ABA772BA31786511307DBE2794D7312F02FA0A75EB68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  release/avutil-59.dll
- Size 1000KB
- SHA256 cd256113d455d362d769a859d2214b9f672be8d2692eebd7539675d31620ca6b
- MD5 9f4e1d61cf779052fed243c2142495b2
- SHA1 246b28f23c542ba6f38767ad420fc4b6f716c8af
- SHA512 f3059d52d93731fee5fc03af389ea08f85f449caadc79a0021fe3da2234648ad3bbf012d96eddd2de161bab062bb8be3a9bc98114cb941bb46c1e0117c241593
- SSDEEP 12288:4wCIUQiy/TXud3kOo09O11s5mbxZnBR2XoR6nP3J:4uioXud3kOn9x8fqYRoJ
- TLSH
  T190256C01A6E3187EC16B913046AB7657B6313452CA64BE2F67A14D343F34F916CCFA3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  release/data/languages/simplified_chinese.txt
- Size 53KB
- SHA256 b59dedaab7050ec001256e467e78aacef33a3f25890dfcde8d4785b74b0c5398
- MD5 af38f12bc43231eb1e52e629a8b97812
- SHA1 bc4edcabf64bcc3acc70e03b40ca310270ee2037
- SHA512 272fb6fc26038eddfdbe62bc8789d6ca572326a4a9fecfc44deb0dc4d57d16e4ad719cf0c6f6e0dc64f964e897e233902de510cd2b49a5fa9368769c919b08d7
- SSDEEP 1536:VGMTyIMCgD786Rxx5gy2Dh8hokYCtmZPO0nOAMzLq2:tILP8Mxxay2V8hYCtmZBObXq2
- TLSH
  T1BE335C563344B3FA2283026FD387D678B718E3261335B10A9D75E65C350A92FDA76C8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral9
- Target
  release/data/wordlist.txt
- Size 14KB
- SHA256 bded01753b3137270eaec22800c43a269aa121c5bf254b8f0ae487c8ac4b9cdb
- MD5 c5ca8030f935d6ee878fd41dd6df33f3
- SHA1 78550e86e9eaa25d85fee8e521694f398918fb67
- SHA512 3a1ec234d16254822379afc56a07d08c549b905af07de3b999bee460fe58a3a3ac00651a740bbdae88c0dcc78aa9d616223a20cfd0d9cfe6ffbf6bdd678bf02a
- SSDEEP 384:URFKGC1Mv79nJwX8YqAgKN4kmcDjnZAOflGOF:UO/4FDukcDjn6WMOF
- TLSH
  T1506262986886809258ACF7B0D11B2D9DF12FA76128131D2F8D3ABB5432177BEFF54482
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral10
- Target
  release/gdb_script.txt
- Size 84B
- SHA256 fcc0a155ed26e7e7af6a4292550b59e1267b18e184daf5a549014d273ee8c302
- MD5 4488074e3806ec66a98218bc5536b6d8
- SHA1 5d96132fd6cdb7e6576f2e8568a97e99928d53f8
- SHA512 7e602f3c6802cf1b937647b24e52dc82cb2ccd1183200e627cb2fba504684684e31ae2babb6f2ac3c5d4222b01f75f8d1ad5778f77cf3a8b9e18e02d422a5b7a
- TLSH
  T198A0124A4414080631530816003B11D4634255100F11C3848A8380C09569340D713148
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral11
- Target
  release/libcurl.dll
- Size 665KB
- SHA256 3a89107f7759952181f90ea0c9a0ca2411834211d767ecbdcb59ad87d368a9f3
- MD5 2766fd4056e6cbe71fedb0b3e6affca6
- SHA1 af6cf5b40cc0c3b7e1e17b929a115387b6387cab
- SHA512 f0d6fc8bff938d6724ed618cd21480e9acccb5ab25e100f22cc726134fc838d13ad03114d8ade2899afa487bda41a247f5bca71cfb3646f51c581245e543d2c4
- SSDEEP 12288:bb5Tle9jAc0sd+mjaYH33jc+CA/dZxJNyixJPAEr3e2p2DL:blTle9cU+IX3jcS/dZfN5b32L
- TLSH
  T105E44B27E7A324BCC56BC134836B97727932F4692130BDBF1690DB302E51E506B2EB65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  release/libfreetype.dll
- Size 665KB
- SHA256 5da185332bcf920ff8f3d649b536e44105b914118b33f90a631350e6e813277b
- MD5 564ab421c4f3ecce01d087d4bc28e8c6
- SHA1 3b4e992448c47267de0201ef6b5db0979f8dc192
- SHA512 8dfe5bf1a846fc14c837520bcfe02cef124f1ef49a694b507bbe7d5213e3ba3175c11be5e7189db9f86e90e0e14cebd1dfa60b657bff2eed843e5028a71eb85b
- SSDEEP 12288:pRvw8ezpMBHwZheKGhogg4ywbx7KujYoo0ASAcglfEWmXWF:pRvwTFE+cKGeh4fx7Dkoo0nJZQ
- TLSH
  T1DAE45C57D3E351FDC66BC2344367D772BA31B4201124AEBF42A8DB312E21E90671DBA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  release/libogg.dll
- Size 33KB
- SHA256 5187cbb032ccba2ec40f460572576e964d6e089f0b9ec75d975f4a24c7f45ef9
- MD5 5ea985fe0821b513fb4d002514f0be00
- SHA1 d3ddb70c56546d53224e0e742c13e630a86c6f21
- SHA512 2a7bead202c013981bbc5ec505e36f3ab898d88c971a3a5efd21862470579b20769ebb5241e4854a2ed192fb1e9b7a0c8473bf3669cfefd67ff42c780bd88276
- SSDEEP 384:vhge09sMsINs0b4WwuKVuY82NNv8j9JOoXQ8nR0LRRCppImMAYnQcg6FSsTq6dB8:vhd09sVI20vwjOj9JnnGtUplYXosS
- TLSH
  T1DDF27D0F77A3A8ADC81AE13444AFA332F4B7B831A9625D7A0350D7311D70DE46A3DD69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  release/libopus.dll
- Size 544KB
- SHA256 55a25a986ef2bf874503e9800668fc5292a9ebe3b011cb3569706c8629d0dd95
- MD5 d1e88f2125d7bd8b1d375aedcf1fdebc
- SHA1 39f1dd204db03aa2194ff07d29a149377b04b9b8
- SHA512 f538b0b192be0218e22847e79c398a2232aa59dcf4a97827511c1d296b8fc68f3988e63123e28d94018cf55c0ee771cbf56958e345ba3762056ec1ba760d478f
- SSDEEP 12288:RYdxjSKUT0qanhlN5FRYTLHED2KX4FKbgYWzzKyfo:RYjjSKUT0qanhlN5ITLs2eDc5Q
- TLSH
  T19BC4F729C7FB94ADC27BC1B84B0B5B775830BC5D5178A43B4AE445C13B761309BEA3A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  release/libopusfile.dll
- Size 49KB
- SHA256 5f25c3fa2feaae3d6e7c129b043b1a5b51ae4db1bdfc2c9d4f77030e24bd8f74
- MD5 f69a5de7fad79e0cbac3909d71e06acf
- SHA1 03342585c470080703b0aeedd28143cbcb37e8ff
- SHA512 315df87137af0befe212e779a8daab0e1857e18422219bc389123ab2d3b50e2e9f074c57c7d13d61e23ff93eec58e31257d2bce4292e25cea025ed0eb278e208
- SSDEEP 768:lQb9+k5Joapi+J15CJ/l7R/LCyC00JuqV5JRttx8WCDx:l2Ik5Jp4K15CJd1XCJJuGJRX/Ox
- TLSH
  T1C233390BF2A325FCC567C07057EB9733BA71B8214630AB6E4794DB382E64D506B2E719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  release/libpng16-16.dll
- Size 278KB
- SHA256 d6b01790f7cd91518436fd84d98a43919726cbf7783c5b6314014e4837fbadf0
- MD5 d67636715ff72454be4439dde2af829a
- SHA1 adfa6cc1b2aa436ab12d87524bc7fe87944ba145
- SHA512 c63332a885364baf8e48b9be23f701682ee4e7b028aeff2f70c727a53ac47cae6451a34184a5ca06e058dcb7c458d9d64c6268668f9a9cc6e4b2dacb40a35c44
- SSDEEP 6144:JrXVb288kcpHH98Ry0zI0mscZ6pRERo/as7I4j36R109m7w8EA0WpEj:5zERo/J7IQ3mXw8zO
- TLSH
  T1B854E73BD7B3C86DC5DB81B17F8399D42570BD381335E44F02846A51BB2B9707BAA1A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  release/libwinpthread-1.dll
- Size 55KB
- SHA256 b08e275950001e5743c7ceb2dcf74f7026994423f7d5dd786971d58c5be34644
- MD5 328445252bab42fb5a44fccf48e69ae5
- SHA1 3234bbc717fa215e605eecb3c00e27b3501918e1
- SHA512 c9ffc5fcd9a0ac57757261238198253aa1c031164b5250602d2c2e7a97a44cc11d0f8d4ed4e6c3632331cf34a666737772c8cbe87d4f7ce2836e3cf6560cbb6f
- SSDEEP 768:UN/utyFl3DbNnsoG8AxZBwKTDR7ILp1hjxxQGc1icim3Yu///nBacTzZ3T:ahFJFGVxwmg1hjxU1dim3YuHQcXZ3T
- TLSH
  T171431A3E76A648FEC52BC23485FA4332A572B0103236DF1E9734D7752E78D709A2E598
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  release/sqlite3.dll
- Size 1.4MB
- SHA256 d88f931e488580a0d5c813a20219a90ca799e5dfe91ec52e38dc5c16a1ac1537
- MD5 df4151441926e2abd3a219765d4beb6a
- SHA1 887bfbaa84d7aac9185b8fa8fcd9adf49af4fd3f
- SHA512 1435243d825ad1045bbf3374ec1740a5358f58516c16cb49ad9955e8473a30c6b0cb1d36a6a3d0a6998f06fd45b09b38a9ae622ad2bfcd9e22d7ba31d5e6c57e
- SSDEEP 24576:KwiQfhH3quxQyWjcG27EFSv6fSpR9ClPDuXoebL/YXBjH9xEwneA0uj:NiyYuxEjcG27Xv6fSp7ClPUoebL/YRjL
- TLSH
  T12D65A376D7A3C86CC1EBD1B03F438AD16479FD690634B09F06851942BB0BD206FAE6E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  release/steam_api.dll
- Size 102KB
- SHA256 888e5b22eff5d95123dfa1f1b99bc303c68b17c45089f2ce0ca621802acfa27d
- MD5 ce9f79d736f05eab96bf8768016240ce
- SHA1 d02d28e479ab7456ea9bc28c46995136c99b91f7
- SHA512 09ff9b7398db3836a0a0e06876547c5eacb6f1071632ff34fdf131325dec9845f1a527d5a380858ba58cf052facca2ead4b443f8234b61cfeea1dc780162a943
- SSDEEP 3072:XYTp9TFaX67W3iUPoqa0ZWdtV03APJZfFA:Q3TBMiUPop0ZeV
- TLSH
  T1CBA34A57A2E500BBE1B7867888670F45D7B6F81217619FEF03A0425A2F273E14D3AF61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  release/swresample-5.dll
- Size 120KB
- SHA256 011c439c98be2fb44d0364d872bda437e2a618e89594e60ca3e63a6ff5fb8fd2
- MD5 46efc33d22160b84e2583880a9bb7e67
- SHA1 5a48a9ea0862991f30fbb42717c25c83e71fd90a
- SHA512 683d0bee7562b09c87a06b5f0f28c23f7b0f0577ee5411fd1c232c969431b11834c301b45b3d251cc56e5830201e2858251974d678817218c224594068e252b9
- SSDEEP 1536:QSQW3BGUktGaxaeJB1DRa8BKCu7yWsm6kjnQFd3JjtlshqvuFtL2I3o:QSQW3BhktF5FWTjvhbfyIY
- TLSH
  T15CC35D57E65358AEC627D030927B7B23BA20747403696E3A49D4CA391C17F80EF5FB26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  release/swscale-8.dll
- Size 596KB
- SHA256 6473e9d9d5a595a09205251d7b2fea1c4111d8dce98c55bc99a6ef4b88fe0be8
- MD5 59f550460f714dbdd0f214237e0a27e2
- SHA1 b92dfc297e1ffe34c5ef91eecf30671f6102194b
- SHA512 2d1fe8daf61d215a78d604d56bd7c16816f8e613e185a3e44e0e4e1d811a5d2aaaa57a77659ffe9077de0a628a706f3120a98f2e5357fa5c716b7d51a2594336
- SSDEEP 12288:agSwInRxXkRibhOcRDDAduavjWWvtwmdJc1TcwGMHiViKR9ObAtHo2XR5yc0fsV3:aPwInRxXkRibhOcRDDAduavjWWvtwmdT
- TLSH
  T1D2D48DEBD363B4DDC66B897142F5DA633A10BC2641265D3BA380E6353927F80571FB0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  release/vulkan-1.dll
- Size 1.4MB
- SHA256 aa269102360057118163c0a53917c3c80cdbb5468c1c494f23f6ecdf21140efc
- MD5 af9b616f8dac435c0b5017b8a87eedd8
- SHA1 47f09d8e12b0cb5559fd583c5eb08936cd3767b9
- SHA512 7a0307f465ae74537bc86e1e74c7032125ba17544c0f7f01af11e8463149911e23e627fbca75110e39922ff238d93ecb4d0cbd72a2630a8901cb4dbbf2241f59
- SSDEEP 12288:tYRPw/UEgmNXQKAb0ff1sBiHMXgZvfWw/eaEXAyrbhneYbZuPdbOxbhVmyx+YbeL:aRI/UEg/j4kSoVl+YKhgM
- TLSH
  T168656C66CF940145D2B7923C8E818B8BD5B3FC40632497CB016D4AE96F13BED59BEB60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  release/zlib1.dll
- Size 112KB
- SHA256 f30c754851e160f715f05f94ff97d55bbf50533d0d39376cd0eabf36f135c512
- MD5 72c6ab0d812123687d9571257ead6f9b
- SHA1 23f69d3e25b520eaf4b7c142c828d06dd05c882a
- SHA512 24982412c82970c0666a38afce91884f51bea50c0425b73c51c066e8682f8227851756c1677a1f4d81c7c40ccd45ca1c4c5b9d2c1cfe9d9ad91c48de3875c09c
- SSDEEP 3072:PIyBo0/mpdbKZZDiCBNgcAJ3+TBfM8cu89Zi:PIx0/mrbiZDiCXgD0TBWu89Y
- TLSH
  T1D1B36A5AA6E325FDC177817091EB5B79F831B8211A305EBF5288E7701E12E506B08BFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24