General

  • Target
    Network_Toolkit_1.17.148_Update.zip
  • Size 7.7MB
  • Sample261102-jm8s2sat2p
  • SHA256 3f5c77eb4344ef398e8534991197b0ae2d752e20b7ba2fa190dad6967922c45f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Network_Toolkit_1.17.148/Network_Toolkit_1.17.148_Windows_x64.exe
    • Size 20.1MB
    • SHA256 84433846e7b508307fae225e3b86ad2b628191c8d476e2aa9833b043408a12d9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks whether UAC is enabled

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Network Share Discovery

      Attempt to gather information on host network.

    • Obfuscated Files or Information: Command Obfuscation

      Adversaries may obfuscate content during command execution to impede detection.

MITRE ATT&CK Enterprise v16

Tasks