General
- Target desktop.ini
- Size 282B
- Sample241004-3avkfasanm
- SHA256 b029393ea7b7cf644fb1c9f984f57c1980077562ee2e15d0ffd049c4c48098d3
Score
8/10
Malware Config
Targets
-
- Target desktop.ini
- Size 282B
- SHA256 b029393ea7b7cf644fb1c9f984f57c1980077562ee2e15d0ffd049c4c48098d3
Score8/10Downloads MZ/PE file
Office macro that triggers on suspicious action
Office document macro which triggers in special circumstances - often malicious.
Possible privilege escalation attempt
Executes dropped EXE
Modifies file permissions
File and Directory Permissions Modification: Windows File and Directory Permissions Modification
Legitimate hosting services abused for malware hosting/C2
Modifies boot configuration data using bcdedit
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v15
Defense Evasion
File and Directory Permissions Modification
2Windows File and Directory Permissions Modification
1Modify Registry
1Pre-OS Boot
1Bootkit
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1