1172c61c541e86b21bec685608c63d398c5d5e1ad5d38cd6e1540e7f38021497

General

Target
siem-agent-windows-amd64-1.13.0.zip
Size 4.0MB
Sample261104-tbfm8sdx7m
SHA256 1172c61c541e86b21bec685608c63d398c5d5e1ad5d38cd6e1540e7f38021497
MD5 29448d986f9aa05711e5387fad15d9c6
SHA1 ee3a60107474d7459e7d6f4ceeec4beb6ee06872
SHA512 32a2da0ae00a0dc347dc9646cc87082a96c952e3eaf0d52d3312998ee895927819b0d421dd260785faace05e50c93d3b31dcf180d70169542eecefd16daf8dc7
SSDEEP 98304:Iv5E/y57Kt++rJT9BCJzmHqz3m1FPf7/CVw3EA6rB/8EpP:GJutFA+qz3m1VCWEj/11
TLSH
T14816333EFAE19639A58DC8D771C2C528F9111D9CC7CB8DB5B1EC7D818B21881EDA4293
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

execution

Malware Config

Targets

- Target
  install.ps1
- Size 4KB
- SHA256 347566fc71daff44bb63e1c2cb3e0bb28af63764ad0b41dd4e07e7d91eebc6d4
- MD5 b3667f798d0361867ae1e299f53c1d06
- SHA1 ddfeaee63675a20cc329c3863ff78718f52afd32
- SHA512 53e5ba7d23d16bcb55d7780837c35a3c8fc390e3d1ba2cbe1254cde4ae474121310f4bc97ccf8c272bd921c3f080f349ddc3eec09cd25f07bb34b291b0247081
- SSDEEP 96:kPgRAm6tbzcWJpWJv1fu4ub8u/ifXzCS7q/gEKceJ73UIKI:ygRAbtHcapWfGmjCS7q/gEVeJzUI
- TLSH
  T1DC91B825E43803A18EB0DF98ECA4688C7D1F00570A653B60B0ADD64EDF7196DA3773B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

execution
behavioral1 behavioral2
- Target
  siem-agent.exe
- Size 9.8MB
- SHA256 6f2cec9f3cec8ef55b11928c7861ca739a836876ad21305b6bfc78f3bcca7714
- MD5 b3fda3be1643ca250655b574af54b4ea
- SHA1 c92e18bd354026ae6e88e17699094dea8781ae34
- SHA512 2ec19f09acbf78f618ce8ebeffb6b95d25aed7b20ca03a32e6aa56c92d6b720b200d13cbbf7aeccd6dd424a7875ff325492ad4ce963834735ffc280c70ddf6eb
- SSDEEP 98304:mIriWwxIHU94HeZSrgBZn8M6btLxbiEwQ:mqtoyg3n+7wQ
- TLSH
  T1A9A64953ECA555E8C0AED5348A7692237B707C884B3123D72B50F6246F33BE4ADBA354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  uninstall.ps1
- Size 1KB
- SHA256 efe07eb057c5202f80b3b0571be94c5bfaf45bc08d3dd46f8fb0f9ee68f5f404
- MD5 8817d556fea2ceb0bf6c5cf127ce5850
- SHA1 04535fc9b33c72d3b73c6094c7561cad96d75b2f
- SHA512 809e36fd3b71b7299a56e4b41019658a9c6473e4db2003edd440f74609bec616d618f21b6c95d377c9ecb5f63f9fb9b00b72d3b1337d44d26c6eabf21978a513
- TLSH
  T18721AF0317A401E691C75F11DCC7AB8E362F58BE2449271078AE910767919AF4B7229A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

PowerShell

1

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6