Resubmissions
25/08/2024, 01:19
240825-bp25aazhqg25/08/2024, 01:15
240825-bl765azgkg625/08/2024, 01:07
240825-bgn8fszejd1025/08/2024, 01:01
240825-bdhlha1drm1025/08/2024, 00:58
240825-bb2atszbpf1025/08/2024, 00:56
240825-bavrna1cnl1025/08/2024, 00:53
240825-a8zmtszake825/08/2024, 00:51
240825-a7mxms1arj425/08/2024, 00:45
240825-a4djssyfre325/08/2024, 00:18
240825-alyr1sxfpf10General
- Target https://github.com/Endermanch/MalwareDatabase
- Sample240825-bb2atszbpf
Score
10/10
Malware Config
Targets
-
- Target https://github.com/Endermanch/MalwareDatabase
Score10/10-
Modifies WinLogon for persistence
-
Impair Defenses: Safe Mode Boot
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application
-
Legitimate hosting services abused for malware hosting/C2
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1