Overview

overview

3

Static

static

3

run.ps1

windows7-x64

3

run.ps1

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    swprv.zip

  • Size

    54KB

  • Sample

    240701-etre5awckg

  • MD5

    856130082aff0918ff6e9f0f0d58fcfd

  • SHA1

    3c259383b28ed475d97bd8eccb6a55b5e5e828ed

  • SHA256

    8ec46259516a0f2fe8d7b7593d448b98e27908c0d4a6b84d72af73358f9017d7

  • SHA512

    c31d77d595f9051efa69e4bf92ec2aaca937fa9664bd3e8a8e2c44d7003f8b992218cf2e74450372de7531acd9bdefceba105c2b4ad2168bfdaabfe94b168b10

  • SSDEEP

    1536:j3FH9EEWT6MdJ+VVXh3ilLBrdB8rFT/hFBaK74gjT:R9EbBJ+VVx3uSxZ74oT

Score
3/10
execution

Malware Config

Targets

    • Target

      run.ps1

    • Size

      51B

    • MD5

      191ab7155e4962b7477313fd0465905c

    • SHA1

      ffebb6a6278c42799087154cc748eafc499f1808

    • SHA256

      bcdc479ae5c3b5933a015c9b596efb58026d283fbaa0816a8745039ddc7db575

    • SHA512

      aa0f062176a97cb95c456fc050ae02e1208431f099e3f25e7b77796123bfd962545546266a38dd71c63819176f62a134369056e1742ecdc6e45361c65bb0f4d1

    Score
    3/10
    execution
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Command and Scripting Interpreter

1
T1059

PowerShell

1
T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks