2092b6adc41fbedf00d2d7ba258cd7383048e6bb8ec33e5e44328975f1a81ad8

General

Target
siem-agent-windows-amd64-1.14.0.zip
Size 4.0MB
Sample261104-tbee6sbt2z
SHA256 2092b6adc41fbedf00d2d7ba258cd7383048e6bb8ec33e5e44328975f1a81ad8
MD5 799041140db038d2830ad3aa58380611
SHA1 3ad134e06aa59cecf3a1ed29ae3911537a04a066
SHA512 16b9db6e025c54287c2e6e06f11d4838183af279721309d232ac5b7a8ba1387918fc68efa9122efca5a6965ca51ea668a65356136ef6489309671fef0aec6490
SSDEEP 98304:8wQB+GxGu6EU/bdcbmK2LR2RhGljyjy83pnfIcGr5I76lBtMeEMA2:EMGxGuybWbCgyljyW8ZwFe4BtMbB2
TLSH
T1A91633E418FB1E9C9FDC311C0CA726E79644F48C7E64059CEE75CF4877662B180A52AE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

execution

Malware Config

Targets

- Target
  install.ps1
- Size 4KB
- SHA256 347566fc71daff44bb63e1c2cb3e0bb28af63764ad0b41dd4e07e7d91eebc6d4
- MD5 b3667f798d0361867ae1e299f53c1d06
- SHA1 ddfeaee63675a20cc329c3863ff78718f52afd32
- SHA512 53e5ba7d23d16bcb55d7780837c35a3c8fc390e3d1ba2cbe1254cde4ae474121310f4bc97ccf8c272bd921c3f080f349ddc3eec09cd25f07bb34b291b0247081
- SSDEEP 96:kPgRAm6tbzcWJpWJv1fu4ub8u/ifXzCS7q/gEKceJ73UIKI:ygRAbtHcapWfGmjCS7q/gEVeJzUI
- TLSH
  T1DC91B825E43803A18EB0DF98ECA4688C7D1F00570A653B60B0ADD64EDF7196DA3773B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

execution
behavioral1 behavioral2
- Target
  siem-agent.exe
- Size 9.8MB
- SHA256 76b93a5cc25532806cf22e60a747e0e63b9583b0b6926dc98e3d19869076753d
- MD5 3ab97498d8ab6887c5dca6c222a88b12
- SHA1 a6a267331d96f807458ce3cd1487e1bafbef68a1
- SHA512 b86ac74cc35351e878f8cf28ccc8f461e4b00cc91dc4a474b952c7f79398b504c4a90aa80cae1326b3fa838c2ae3619c23db940ac2c89f89217ebc0126cb70e1
- SSDEEP 98304:vHrsOS86jdBJWKQvEIMZnTMr3t2iG+EsX:vAzfIWnIgsX
- TLSH
  T11BA63817EDA954E5C0ADC6348A7692237B707C494B3163D72F90B6346F32BE0AEB9350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  uninstall.ps1
- Size 1KB
- SHA256 efe07eb057c5202f80b3b0571be94c5bfaf45bc08d3dd46f8fb0f9ee68f5f404
- MD5 8817d556fea2ceb0bf6c5cf127ce5850
- SHA1 04535fc9b33c72d3b73c6094c7561cad96d75b2f
- SHA512 809e36fd3b71b7299a56e4b41019658a9c6473e4db2003edd440f74609bec616d618f21b6c95d377c9ecb5f63f9fb9b00b72d3b1337d44d26c6eabf21978a513
- TLSH
  T18721AF0317A401E691C75F11DCC7AB8E362F58BE2449271078AE910767919AF4B7229A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

PowerShell

1

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6