Overview

overview

8

Static

static

1

Update.Client.exe

windows7-x64

8

Update.Client.exe

windows10-ltsc 2021-x64

8

Update.Client.exe

windows11-21h2-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    Update.Client.exe
  • Size 81KB
  • Sample250307-ry2g4sslz5
  • SHA256 e4491bc74740f7b77d2bf3db41e382b729f486b0bcb5dd0e05e7d01ee4cf83ae
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
discoverypersistence

Malware Config

Targets

    • Target
      Update.Client.exe
    • Size 81KB
    • SHA256 e4491bc74740f7b77d2bf3db41e382b729f486b0bcb5dd0e05e7d01ee4cf83ae
    • MD5 SHA1 SHA512 SSDEEP
    Score
    8/10
    discoverypersistence

    • Manipulates Digital Signatures

      Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.

    • Sets service image path in registry

      persistence

    • Downloads MZ/PE file

    • Drops file in System32 directory

    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks