General
- Target https://blankcodefamz.blogspot.com/
- Sample260610-ltj5dagv71
Score
10/10
Malware Config
Targets
-
- Target https://blankcodefamz.blogspot.com/
Score10/10-
Android 888 RAT payload
-
Family: 888RAT
888RAT is an Android remote administration tool.
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates processes with tasklist
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1