General
- Target Fleasion-v2.1.0.exe
- Size 129.2MB
- Sample260627-fe1wpahv3k
- SHA256 573b42ca53efbcd40bd805854001ed08d565bb147a646c05ac53b9ff0c8d98f0
Score
8/10
Malware Config
Targets
-
- Target Fleasion-v2.1.0.exe
- Size 129.2MB
- SHA256 573b42ca53efbcd40bd805854001ed08d565bb147a646c05ac53b9ff0c8d98f0
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Drops file in Drivers directory
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target launcher.pyc
- Size 206B
- SHA256 557d5f6d79a2fea97feecc6fddf0ff18d97e0ca477f3502afa18495c6a0d420a
Score3/10 -
- Target rthook_harden_dll_search.pyc
- Size 3KB
- SHA256 b87ccf0b1e89b40823364d8f9b6486d0ca8544eac4dac5374a761dcc139250b8
Score3/10
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Netsh Helper DLL
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Netsh Helper DLL
1Scheduled Task/Job
1Scheduled Task
1