General
- Target Yeni WinRAR arşivi (2).rar
- Size 44KB
- Sample260624-y394daft9v
- SHA256 f1b92887f3ec82ed4732958571d562cd567834d72397fc8c3f0309f380d95bdf
Score
8/10
Malware Config
Targets
-
- Target Yeni WinRAR arşivi (2).rar
- Size 44KB
- SHA256 f1b92887f3ec82ed4732958571d562cd567834d72397fc8c3f0309f380d95bdf
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Stops running service(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target VgcFuker.exe
- Size 108KB
- SHA256 1fbbca31ed8c43f019fe9f2ebc4fd81db2d903a2c428220dbc7d26f39072c9b5
Score7/10-
Stops running service(s)
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Create or Modify System Process
1Windows Service
1