General
- Target f1e859d99072e35f20e172d8458e3ea1baf8ba86c8c9e311a0debcd2acd5d0fc.zip
- Size 18B
- Sample260511-qtcshset8m
- SHA256 ebcca22ad40a0af49da20c18796cc1dbbc9a572c4554da67cc148e3a830968ea
Score
8/10
Malware Config
Targets
-
- Target f1e859d99072e35f20e172d8458e3ea1baf8ba86c8c9e311a0debcd2acd5d0fc.zip
- Size 18B
- SHA256 ebcca22ad40a0af49da20c18796cc1dbbc9a572c4554da67cc148e3a830968ea
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1