General
- Target hwid.kms38.gen.mk6.exe
- Size 2.8MB
- Sample260705-17ffnsf14z
- SHA256 af333dbeab9268398d985eb80c74adfaa84210a7e6222ab3fc1684a73f052ff1
Score
10/10
Malware Config
Targets
-
- Target hwid.kms38.gen.mk6.exe
- Size 2.8MB
- SHA256 af333dbeab9268398d985eb80c74adfaa84210a7e6222ab3fc1684a73f052ff1
Score10/10-
Modifies security service
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Create or Modify System Process
1Windows Service
1