Resubmissions
17/12/2023, 09:23
231217-lcwf3sfee4 124/08/2023, 10:29
230824-mjle5abg93 824/08/2023, 10:11
230824-l8dwxadb9s 724/08/2023, 10:08
230824-l6nnbsbg33 123/08/2023, 12:45
230823-py9sdacc24 823/08/2023, 11:00
230823-m38prsda7y 123/08/2023, 10:49
230823-mw51asbe95 523/08/2023, 10:04
230823-l4fvpsbd49 123/08/2023, 10:04
230823-l39rdscg9s 1General
-
Target
https://google.com
-
Sample
230707-kvp7cahb5s
Score
10/10
Malware Config
Targets
-
-
Target
https://google.com
Score10/10-
Modifies Windows Defender notification settings
-
Modifies firewall policy service
-
Modifies security service
-
UAC bypass
-
Modifies boot configuration data using bcdedit
-
Downloads MZ/PE file
-
Modifies Installed Components in the registry
-
Stops running service(s)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Legitimate hosting services abused for malware hosting/C2
-