Overview

overview

8

Static

static

536749.742...ã.cmd

windows7_x64

8

536749.742...ã.cmd

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    536749.742.67513.78924_208.69621.4895824ã.cmd

  • Size

    344B

  • Sample

    220114-hspfxseha8

  • MD5

    19461ec95d2ed8da4cc2c4d9550aa125

  • SHA1

    16a95e645237cfcf43e1ac67608783513e7dbfe3

  • SHA256

    758416f5eaeb77570a9529e928cf21a38e803664412a198452719a8b9e994d19

  • SHA512

    4e4d8e9fe6969546c188f02c28525bcaf589801c72054e2e116d05189e6004283a395110717b8936d520ebedc4e9b3b49bc6327d395689c186e695942a03adbe

Score
8/10

Malware Config

Targets

    • Target

      536749.742.67513.78924_208.69621.4895824ã.cmd

    • Size

      344B

    • MD5

      19461ec95d2ed8da4cc2c4d9550aa125

    • SHA1

      16a95e645237cfcf43e1ac67608783513e7dbfe3

    • SHA256

      758416f5eaeb77570a9529e928cf21a38e803664412a198452719a8b9e994d19

    • SHA512

      4e4d8e9fe6969546c188f02c28525bcaf589801c72054e2e116d05189e6004283a395110717b8936d520ebedc4e9b3b49bc6327d395689c186e695942a03adbe

    Score
    8/10

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks