General
- Target https://limewire.com/d/h7Tjq#tAzdgvGW5E
- Sample260711-e5mlbady31
Score
7/10
Malware Config
Targets
-
- Target https://limewire.com/d/h7Tjq#tAzdgvGW5E
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Loads dropped DLL
-
Stops running service(s)
-
Command and Scripting Interpreter: PowerShell
Start PowerShell.
-
An obfuscated cmd.exe command-line is typically used to evade detection.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1PowerShell
1System Services
2Service Execution
2Persistence
Create or Modify System Process
2Windows Service
2Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
2Windows Service
2Event Triggered Execution
1Netsh Helper DLL
1