General
- Target 07052026_1455_07052026_Quote.rar
- Size 628KB
- Sample260507-sam59ae17t
- SHA256 8e3bbaa6bf660702e0962d5b502640b6ebd1e086ca33cb16ac5c248b2dd077f2
Score
7/10
Malware Config
Targets
-
- Target Quote.com
- Size 994KB
- SHA256 d6c0fd882dfcb8e38dee803c61ad7106c3f164c24d22d8eff1686ad6e4a7e11b
Score7/10-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1