Overview

overview

10

Static

static

qeMZ0hsA.bat

windows7_x64

10

qeMZ0hsA.bat

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    qeMZ0hsA.bat

  • Size

    198B

  • Sample

    200402-7vpxchavre

  • MD5

    dbdcd0ab61ac04d5a8795b41b1f91646

  • SHA1

    b94545d0a340a837622f2785ce5c108ef9ffebe7

  • SHA256

    3efce93dd9105db75b8a9634774a9d39cc0f03c08598237f8ec0958d3d121e0e

  • SHA512

    a5083ac4ca7232a5c83e4c9337d0b7634394e359772bce80ed0450f7a42e1d43f5dcaccf25a9fcb37b46fcc2948d23e9758d3a39c43985f8ba3fc11bf7bc81b6

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
ps1.dropper

http://185.103.242.78/pastes/qeMZ0hsA

Targets

    • Target

      qeMZ0hsA.bat

    • Size

      198B

    • MD5

      dbdcd0ab61ac04d5a8795b41b1f91646

    • SHA1

      b94545d0a340a837622f2785ce5c108ef9ffebe7

    • SHA256

      3efce93dd9105db75b8a9634774a9d39cc0f03c08598237f8ec0958d3d121e0e

    • SHA512

      a5083ac4ca7232a5c83e4c9337d0b7634394e359772bce80ed0450f7a42e1d43f5dcaccf25a9fcb37b46fcc2948d23e9758d3a39c43985f8ba3fc11bf7bc81b6

    Score
    10/10

    • Blacklisted process makes network request

    • Program crash

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks