General
- Target Software.zip
- Size 77.0MB
- Sample260708-pbrnaags3p
- SHA256 224543cf4898379744c692d24b1ff453bb5e1aed62d55a7a442ac2acfa9e2f11
Score
9/10
Malware Config
Targets
-
- Target Software.zip
- Size 77.0MB
- SHA256 224543cf4898379744c692d24b1ff453bb5e1aed62d55a7a442ac2acfa9e2f11
Score9/10-
Detected Nirsoft tools
Free utilities often used by attackers which can steal passwords, product keys, etc.
-
NirSoft NirCmd
NirCmd is a lightweight Windows command-line tool for automating system tasks
-
Manipulates Digital Signatures
Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1