19f5ded89ed8e94068c8e6a31226f3460ccc2c433b4a1c7dbb899232eec0c75d

General

Target
LDManager-2.0.10.zip
Size 75KB
Sample261104-2rg51avyet
SHA256 19f5ded89ed8e94068c8e6a31226f3460ccc2c433b4a1c7dbb899232eec0c75d
MD5 33b4e58f3d5c2469ba4c674d04025e5a
SHA1 772b9eac5d3f70627b7b49b44f0e994335c00486
SHA512 2cc8893cf40c00c302ed97a70ba0e0dcc8f4ae4f62cd15950dd27cba63606264dd02f7317ac4a5412392fdc0547bd29a889026d129ee5305758e7f0351180b2e
SSDEEP 1536:Zif/dQr0dV8UNY3R0huDzx4CWy+n5pW0hH3QqdtG9O6OCNmR:cf/dNjMfPN0hdAp5NmR
TLSH
T11773021EC784B2EACB0E05B72832A90670DD4B053755A0BE1F08CA17D9C61DEE965FE2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Malware Config

Targets

- Target
  LD.Sieve.ps1
- Size 50KB
- SHA256 f42c97a233d3a44779b9e68c1fe8fc3bc6a4f8a2dd087d9e0a4b5b57eedda435
- MD5 d3ed6a7cec1571f15d4a7ac4c8c5e13f
- SHA1 30343922e5c9c446056b1abc32bf357b5ea179b7
- SHA512 7bcb695cfae721a784383b0b4f93fa452706d38a882b61ab921f0b2b1ea5abff3b2b06435e246d58528d3287c1b95bd6c55ed6e9d081262fdb5a3bb103d9402f
- SSDEEP 768:jg2sdutZL7C/kof8KM5Qi0r3LZR8qYToTgmwKPN14d:jg2sAtZL7C/kof1i0LLZR8vir14d
- TLSH
  T11833A5156F46B42E06B2E33ACD869408FFB6043BA56D1154B9AC54A63FF1235C33CE9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  LDManager.core.ps1
- Size 158KB
- SHA256 18d9711d59f71f37ee0335bba29545f5d3e11dd0b8fb318af76e9486da179089
- MD5 89f83b9e0efb6b9669957224e986addd
- SHA1 4d81bf57b5a802efde69186bf37e5eda9f54e2f8
- SHA512 dfc9b182e767d544ce075685b148891627158bb7440863040c530aec0aad331a67f2e28038d6b6016c0605923e37d240983cf06c1691b4945c46d5aad83f0041
- SSDEEP 3072:SMrnwY4hEUZd0TX8Dly2NLbQ9PnEdioM3HP+BhkrjX6RDeKq3:prnwcqYMDbbU9HPkkrjKcKS
- TLSH
  T1D2F364206D4654AE02B1E73BDD55A809FCD6047FAB1D1204B5AC58A93FF632CC33DE6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  LDManager.ps1
- Size 14KB
- SHA256 5b820b5fe9a318d8714b697acbf309a96aa68946a7af75752eb3038833a98340
- MD5 23fd40568f6245b0a6d3d8e0c454cdfb
- SHA1 d1d00c60581035e3b0a39cab15f7479998597f4b
- SHA512 a2b3e59b782b51ab9953000b6739de38804ec2b6158b4f0d6d0016159b171f43049de310d427e86dee617669ce393252cde9ec537f114ef02cd63d2350f7ee00
- SSDEEP 384:5N9JC3+uRT3o0lpTADTgm5Thtm5QFxPQZ0Ig:nujqYToTgmwKPNIg
- TLSH
  T1D7526C594D43686E05B2E243C9017C1EF8E607BFAFF952A4389C28391FE13285F3E991
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

PowerShell

1

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Badlisted process makes network request

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6