75341b24e7cbb26e63265647822e824f0574591755a589ceef2a91c4a72877c7 | Triage

Sharing

General

Target

Fattura88674084.vbs
Size

76KB
Sample

241104-mr8wdsxrh1
MD5

900728aa8935e1c237d057bc47a26dbd
SHA1

e99ab19dccdad0c566189fcf366be5674a90709a
SHA256

75341b24e7cbb26e63265647822e824f0574591755a589ceef2a91c4a72877c7
SHA512

3f511a2855d2cb8649c2d31a3ef913d19b8b7c6bf5bee5fb4912092c816045fac2164b54a301e74ce486826073c07614184614e7292bbd399d88e9125d97fee7
SSDEEP

1536:gOddhnd0wdhwdEZDqawdhwdIawdhwdFwq7Q2rr8LzdnGgrrTwdhwvwfcwdhwdGhp:gOddhnd0wdhwdEgawdhwdIawdhwd7WzW

Score

8^/10

execution

Malware Config

Targets

- Target
  
  Fattura88674084.vbs
- Size
  
  76KB
- MD5
  
  900728aa8935e1c237d057bc47a26dbd
- SHA1
  
  e99ab19dccdad0c566189fcf366be5674a90709a
- SHA256
  
  75341b24e7cbb26e63265647822e824f0574591755a589ceef2a91c4a72877c7
- SHA512
  
  3f511a2855d2cb8649c2d31a3ef913d19b8b7c6bf5bee5fb4912092c816045fac2164b54a301e74ce486826073c07614184614e7292bbd399d88e9125d97fee7
- SSDEEP
  
  1536:gOddhnd0wdhwdEZDqawdhwdIawdhwdFwq7Q2rr8LzdnGgrrTwdhwvwfcwdhwdGhp:gOddhnd0wdhwdEgawdhwdIawdhwd7WzW
Score

8^/10

execution
- Blocklisted process makes network request
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

	
		OSZAR »