General
- Target killyou.rar
- Size 29.4MB
- Sample260708-b6k74ahs3y
- SHA256 99b950959c28994d3387223278b6372d69d4254d225452eaac245bc41e0292fe
Score
10/10
Malware Config
Targets
-
- Target kiilyou.exe
- Size 25.3MB
- SHA256 66f7d63e8f501819ec4e84c87f7efa21351f5e1cf821e219f46484b53c5d9b75
Score10/10-
Modifies Windows Defender DisableAntiSpyware settings
-
Modifies Windows Defender TamperProtection settings
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Create or Modify System Process
2Windows Service
2Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Create or Modify System Process
2Windows Service
2