General
- Target https://dafvz5743x4yg.cloudfront.net/SignCloudPC.exe
- Sample260522-mrtfpshs2j
Score
8/10
Malware Config
Targets
-
- Target https://dafvz5743x4yg.cloudfront.net/SignCloudPC.exe
Score8/10Downloads MZ/PE file
Manipulates Digital Signatures
Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.
Executes dropped EXE
Loads dropped DLL
Modifies service settings
Alters the configuration of existing services.
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
4Install Root Certificate
2SIP and Trust Provider Hijacking
2