General
- Target 313.exe
- Size 26.9MB
- Sample260707-mx69radt9k
- SHA256 c6c7332e4f095e45ecbab646dd84d0255a27580b2c8622184a6e4326d035bc15
Score
10/10
Malware Config
Targets
-
- Target 313.exe
- Size 26.9MB
- SHA256 c6c7332e4f095e45ecbab646dd84d0255a27580b2c8622184a6e4326d035bc15
Score10/10-
Modifies Windows Defender DisableAntiSpyware settings
-
Modifies Windows Defender TamperProtection settings
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Create or Modify System Process
2Windows Service
2Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Create or Modify System Process
2Windows Service
2