39a8389d84f9310c5ffbfcc65209bebaf557d150b07ce3511c4c749d97bc1adf

Sharing

Copy URL Twitter E-mail

General

Target
ApexTweaks.zip
Size 2.7MB
Sample261030-pfcd6aee73
SHA256 39a8389d84f9310c5ffbfcc65209bebaf557d150b07ce3511c4c749d97bc1adf
MD5 ec3443e2835259c7a23be0aabfe8be71
SHA1 d4db8f73ded41acb2e65f55e5f21ccb6b80647d9
SHA512 d514a8e915aee3ae0f65605d96ecb8c25adc91fd17c51b3177e0098c3a64fa9653c558ada0be5bdc0f0b3dbae82a1928528911f0f7eca1963fac9e72b0a21958
SSDEEP 49152:zXogVTfZVOwIS7BqSmlgQB4JNsCyHEFogxcMRZSniFtfjnCdwLIo4LsAcHm60whS:TogZfZMwP7BC+JND8XAReofjbtZASm6M
TLSH
T121D533CAC873280FCF4ECF78045E50907F6E6495662AA5013CA994BDD297FFAD80879D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion execution

Malware Config

Targets

- Target
  app/ApexTweaks.exe
- Size 1.8MB
- SHA256 2bc7646161bc62b8c44e7c9de99d44ddf45eb78294760fc596fe6e89f2f7413d
- MD5 800592c786b3bd7810ef8b6a8c0cd361
- SHA1 acd40f910557f421da5e1bcd35b6b0a4ec1394dd
- SHA512 84fb59aebf20cb68ef026fe7f295a25a0457a5df3087a1475519c06a68fae7ed69fd44c880b1764b0aa6c6c004966797dea38355ee430c3f5c623e3d013ab88e
- SSDEEP 24576:QaehKkVkf//YuQ/HO5RR8Kdn4auMlSPiAGek46zyPkvX:QaMKkKf//BDRRlWaO6
- TLSH
  T1D4954B47BCE109BAC0AA92318A666292BB71BC590F3263D73E50B33C2F77BD05975744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
behavioral1 behavioral2
- Target
  app/ApexTweaks.ps1
- Size 542KB
- SHA256 1ff4e71cd67498036380439852ab8b4d5b0a47a336281e53d7c6420221911338
- MD5 3fc4b39f4885499b59031d071c0d2be1
- SHA1 ef4acd73e3e6fab7bfdc7c196e7b7b62d679721c
- SHA512 229bf0bdb1c1beccd6c165e156e9419a8e56d5a8f2b175f159b3bdafb1a8793388bbabb8b3ccadde284c321126c0f0ec6b2a54a95e1d3f3df243e243ebc35de5
- SSDEEP 6144:C65lO//brvMjYzF6KUxiA92A5RjEcdUvSZRrA9zF2:CQAMIuiwH7
- TLSH
  T1C1C4F82ABDA492314B87D07A5D9EA804FB35006F521D4D24B6ED82C46F90B78C2FEFD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  app/Launch APEX TWEAKS (as administrator).bat
- Size 831B
- SHA256 ad032eb2dde01d6f425e75ae6f33e9db901e20b30942303ac38b90716b3d7e05
- MD5 9432d695ed4de9fecaa1eabebd8e89a5
- SHA1 6ceb0df11f53e3444cf0806bbe7e189db994ab0e
- SHA512 62d2fc3b73b90de3d7a0274eca33f6fb3eee2a2ac283a66d677280120b2943a3ee5b64696f743d9fbf2985d6acd697787d9d4752d527a61bde712a3c6de3e1d7
- TLSH
  T1040116477AABD7BB2776A96140DD8317A909029B632A53C2B079C354710D309CBB118D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

defense_evasion execution
behavioral5 behavioral6
- Target
  app/Launch APEX TWEAKS.bat
- Size 1KB
- SHA256 dfc666de1a4a31192669f6503652a8bafd4d1598ea4b632fe6971ecbe4d1acda
- MD5 4708a60050787fde59a0b3b77524a3c7
- SHA1 021e4fdf769de72371843c7f33147e3c4cbd94d9
- SHA512 ee6bbf787fe5898b158b5c927adcdb24eebca46aa19c8dd71efde9cb553d4dc77dfc1ff73b3aae1dbe6dedae83b17bc612d2fa01f24cb78087b2fc2b856089cc
- TLSH
  T13D2144DBBC69D39225F6E8A5508C535DD409402E5322D390343F4298730E349C6EF1CD
- MD5 SHA1 SHA512 TLSH
Score

4^/10

defense_evasion execution
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Ignore Process Interrupts

T1564.011

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Command and Scripting Interpreter: PowerShell

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8