Resubmissions
15/04/2024, 10:36
240415-mnbrgscd56 7General
-
Target
https://cdn.discordapp.com/attachments/1221907861861302442/1225081594260226078/ParadoxCRACKED__DEOBF__CLEANED.exe?ex=66290fa4&is=66169aa4&hm=bfc2d897aa1fcbaff59869e31008033cb1a0e37ea4186ee4dec4329d36c08009&
-
Sample
240415-mnbrgscd56
Score
7/10
Malware Config
Targets
-
-
Target
https://cdn.discordapp.com/attachments/1221907861861302442/1225081594260226078/ParadoxCRACKED__DEOBF__CLEANED.exe?ex=66290fa4&is=66169aa4&hm=bfc2d897aa1fcbaff59869e31008033cb1a0e37ea4186ee4dec4329d36c08009&
Score7/10-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Drops startup file
-
Executes dropped EXE
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1