General
- Target Setup.exe
- Size 98.8MB
- Sample260626-161efsfy2l
- SHA256 63e8955d6d2a2866e6c369063e07425ca86916cdddc18373242558aa7b15dfd1
Malware Config
Targets
-
- Target Setup.exe
- Size 98.8MB
- SHA256 63e8955d6d2a2866e6c369063e07425ca86916cdddc18373242558aa7b15dfd1
Score8/10-
Downloads MZ/PE file
-
Manipulates Digital Signatures
Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.
-
Creates new service(s)
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Network Share Discovery
Attempt to gather information on host network.
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Component Object Model Hijacking
1Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
1SIP and Trust Provider Hijacking
1