General
- Target Queendom.exe
- Size 198.1MB
- Sample260709-cwhjwscy9v
- SHA256 cb8cddae680ca37a8a70f748dba07472a3a1b211922a109a7c0249489185a966
Score
8/10
Malware Config
Targets
-
- Target Queendom.exe
- Size 198.1MB
- SHA256 cb8cddae680ca37a8a70f748dba07472a3a1b211922a109a7c0249489185a966
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE
Loads dropped DLL
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Probable phishing domain
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Scheduled Task/Job
1Scheduled Task
1