Overview

overview

10

Static

static

1

MoneymakerTweaks.bat

windows10-2004-x64

10

MoneymakerTweaks.bat

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    MoneymakerTweaks.bat
  • Size 143KB
  • Sample260706-krnjcacy4v
  • SHA256 26bc41e648c62cf44aad61ce5914b84bd7819ea729d1974aaac0eed0638b79f6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
defense_evasionpersistenceprivilege_escalationtrojan

Malware Config

Targets

    • Target
      MoneymakerTweaks.bat
    • Size 143KB
    • SHA256 26bc41e648c62cf44aad61ce5914b84bd7819ea729d1974aaac0eed0638b79f6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    defense_evasionpersistenceprivilege_escalationtrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Event Triggered Execution

1
T1546

Image File Execution Options Injection

1
T1546.012

Hijack Execution Flow

1
T1574

Executable Installer File Permissions Weakness

1
T1574.005

Privilege Escalation

Abuse Elevation Control Mechanism

1
T1548

Bypass User Account Control

1
T1548.002

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Event Triggered Execution

1
T1546

Image File Execution Options Injection

1
T1546.012

Hijack Execution Flow

1
T1574

Executable Installer File Permissions Weakness

1
T1574.005

Defense Evasion

Abuse Elevation Control Mechanism

1
T1548

Bypass User Account Control

1
T1548.002

Hijack Execution Flow

1
T1574

Executable Installer File Permissions Weakness

1
T1574.005

Impair Defenses

2
T1562

Disable or Modify Tools

2
T1562.001

Modify Registry

3
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks