https://boosterx.ru
General
Target
Sample
https://boosterx.ru
220521-sgtxdadagp
Score
10 /10
Malware Config
Targets
Target
https://boosterx.ru
Score
10/10
Tags
Signatures
-
Modifies Windows Defender Real-time Protection settings
-
Modifies firewall policy service
Tags
TTPs
-
Modifies security service
Tags
TTPs
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
UAC bypass
Tags
TTPs
-
Modifies boot configuration data using bcdedit
Tags
TTPs
-
Modifies Installed Components in the registry
Tags
TTPs
-
Reads user/profile data of web browsers
Description
Infostealers often target stored browser data, which can include saved credentials etc.
Tags
TTPs
-
Enumerates connected drives
Description
Attempts to read the root path of hard drives other than the default C: drive.
TTPs
-
Legitimate hosting services abused for malware hosting/C2
TTPs
-
Looks up external IP address via web service
Description
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Drops file in System32 directory
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Privilege Escalation
Tasks