General
- Target Yeni WinRAR arşivi (2).rar
- Size 432KB
- Sample260624-yz8fdaft7w
- SHA256 0ef72f15abf0b1139bfcc90a45fa80d27a6df72db763b54ca9262864a27e38b3
Score
8/10
Malware Config
Targets
-
- Target Yeni WinRAR arşivi (2).rar
- Size 432KB
- SHA256 0ef72f15abf0b1139bfcc90a45fa80d27a6df72db763b54ca9262864a27e38b3
Score7/10-
Executes dropped EXE
-
Stops running service(s)
-
- Target emu.exe
- Size 1.6MB
- SHA256 2d08af5022f99cc2692fcf9e35bd959f9bdd137b5409d77bdb9b0ce2c7d10c11
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Stops running service(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Create or Modify System Process
1Windows Service
1