General
- Target d3dcompiler_43_x86-64.zip
- Size 12.5MB
- Sample260606-wembasbs2v
- SHA256 8877aad791417fc022382c1dce6bbffd7bf2f13de3897ff1064db2c0a9e45b6d
Score
8/10
Malware Config
Targets
-
- Target 6t2eYjURzn3wJ80IPBur.exe
- Size 11.5MB
- SHA256 2caffbe35f0f4cc7301afe97f35af79072893fec27a78fc573fe2155c0c599b5
Score8/10Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
Loads dropped DLL
Drops file in System32 directory
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target d3dcompiler_43.dll
- Size 4.3MB
- SHA256 4b074a3976399dc735484f5d43d04b519b7bdee8ac719d9ab8ed6bd4e6be0345
Score1/10
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1