f7e629de1e26b77f3acae91d0001a1cbadddf41dd8aef77de4d5f5f37153a06d

General

Target
siem-agent-windows-amd64-1.15.0.zip
Size 4.0MB
Sample261104-tbdtmsdh46
SHA256 f7e629de1e26b77f3acae91d0001a1cbadddf41dd8aef77de4d5f5f37153a06d
MD5 5079b6622c05cd70044cd293e44e0925
SHA1 b2255fcda5f3f5e30e5e7223f97064cf0f8ba558
SHA512 7303bbd594bbbd8d1a0715026772a7a155bbb0ead68da7da7ea78991abcb7ab35b5c9551182b118a24f2d0dc177e554178086a55e543b95dff6bbeb7de491a5a
SSDEEP 98304:xd9s+YYqhDQV2ClSTky+eGfWguAN7wm2ZgiA98CE1HXKqUFXccE15:j9NYYIQV2CJDfW7AGmYAmCiwFMV15
TLSH
T1911633212FF9EA64ECD59D18E8C8CA342B824B3FD9D1CCB51478954B111B0A7DF4792B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

execution

Malware Config

Targets

- Target
  install.ps1
- Size 4KB
- SHA256 347566fc71daff44bb63e1c2cb3e0bb28af63764ad0b41dd4e07e7d91eebc6d4
- MD5 b3667f798d0361867ae1e299f53c1d06
- SHA1 ddfeaee63675a20cc329c3863ff78718f52afd32
- SHA512 53e5ba7d23d16bcb55d7780837c35a3c8fc390e3d1ba2cbe1254cde4ae474121310f4bc97ccf8c272bd921c3f080f349ddc3eec09cd25f07bb34b291b0247081
- SSDEEP 96:kPgRAm6tbzcWJpWJv1fu4ub8u/ifXzCS7q/gEKceJ73UIKI:ygRAbtHcapWfGmjCS7q/gEVeJzUI
- TLSH
  T1DC91B825E43803A18EB0DF98ECA4688C7D1F00570A653B60B0ADD64EDF7196DA3773B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

execution
behavioral1 behavioral2
- Target
  siem-agent.exe
- Size 9.8MB
- SHA256 cfdf36ead468c1a33a25712f7f5f753271cb794b207c2639880ac9d4bbfd270f
- MD5 7a8e0f304bdf77e991dcec520c18bfbb
- SHA1 cfe7129de6b1e921166ef5107d0336eba7cbe807
- SHA512 ba8203e8d4f50d6b089290f80aa9abde55719878c94208609dbbaed4dd01a65dfb14675e03d2025cb942db93397d103c7fdaffe96bb36a26edda5ead1827b7df
- SSDEEP 49152:5U+wlqms/2kGUAJ8aJUX5SZPKJnQdCnc/WUwYbCsBsxwrTuttrXBWfpuYEpe8GOV:5Up0JSt3jrTQEUYbjCZnX3fe9rXEp7
- TLSH
  T195A64A17EDA644E8C0ADC2348A7692337B717C894B3163D71B54B624AF33BD4AEB9710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  uninstall.ps1
- Size 1KB
- SHA256 efe07eb057c5202f80b3b0571be94c5bfaf45bc08d3dd46f8fb0f9ee68f5f404
- MD5 8817d556fea2ceb0bf6c5cf127ce5850
- SHA1 04535fc9b33c72d3b73c6094c7561cad96d75b2f
- SHA512 809e36fd3b71b7299a56e4b41019658a9c6473e4db2003edd440f74609bec616d618f21b6c95d377c9ecb5f63f9fb9b00b72d3b1337d44d26c6eabf21978a513
- TLSH
  T18721AF0317A401E691C75F11DCC7AB8E362F58BE2449271078AE910767919AF4B7229A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

PowerShell

1

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6