General
- Target BuilderV2.exe
- Size 36.3MB
- Sample260420-vxtyesa17m
- SHA256 d1e4bd97a42eae39d54f3e40c9ea33f7857db2173b2d7ab9842e21040dd4cfe4
Score
8/10
Malware Config
Targets
-
- Target BuilderV2.exe
- Size 36.3MB
- SHA256 d1e4bd97a42eae39d54f3e40c9ea33f7857db2173b2d7ab9842e21040dd4cfe4
Score8/10-
Modifies Windows Firewall
-
Creates new service(s)
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies service settings
Alters the configuration of existing services.
-
RustDesk remote access tool
RustDesk is an open-source remote admin tool.
-
Stops running service(s)
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
4Windows Service
4Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
4Windows Service
4Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Impair Defenses
2Disable or Modify System Firewall
1Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1