General
- Target CVE-2020-1350-master.zip
- Size 212KB
- Sample261027-da9a6axy7n
- SHA256 27c35e0ae89d5526efb4a9a4fe8210907a31df70659d113945e01b57e4af426e
Score
8/10
Malware Config
Targets
-
- Target CVE-2020-1350-master/CVE-2020-1350.exe
- Size 118KB
- SHA256 9e6da40db7c7f9d5ba679e7439f03ef6aacee9c34f9a3f686d02af34543f2e75
Score3/10 -
- Target CVE-2020-1350-master/Fix.bat
- Size 170B
- SHA256 df273ba078021ddc30f1e09987791e3385af87a0cc517ff591e3cf6d55a3609e
Score3/10 -
- Target CVE-2020-1350-master/PoC.exe
- Size 284KB
- SHA256 bf9657ff82065a676bc2aeb07877d5964a193da244e943ee37f08b931c9868b7
Score1/10 -
- Target CVE-2020-1350-master/README.pdf
- Size 4KB
- SHA256 9f652a9d51bb3ec1edb45540fee3e84cd9fa57c50c5aa927410d38d78359bda5
Score7/10-
Loads dropped DLL
-
- Target CVE-2020-1350-master/exploit.sh
- Size 185B
- SHA256 e085ae114095009aa79df0db5585e5513e466ffb17f98aaeebb5951a665d6811
Score3/10 -
- Target CVE-2020-1350-master/windows-exploit.ps1
- Size 36KB
- SHA256 0b719028aecc449a9efa9ec9d67f7faf3ffc15404c362f71c659d698be2c9956
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1