Resubmissions

02/09/2024, 06:41

240902-hfqs8avhjg 8

General

  • Target

    https://mega.nz/file/xxJGkRTA#ILEkqHMylFY-ilOAq9UoN8K4jnXgs_1njmGdcGjVwfE

  • Sample

    240902-hfqs8avhjg

Score
8/10

Malware Config

Targets

    • Target

      https://mega.nz/file/xxJGkRTA#ILEkqHMylFY-ilOAq9UoN8K4jnXgs_1njmGdcGjVwfE

    Score
    8/10
    • Manipulates Digital Signatures

      Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Executes dropped EXE

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks