General
- Target CrossBypass.exe
- Size 44.8MB
- Sample260716-nt7lsabz6k
- SHA256 042a9accf93c7d5eeb64ef3aed3075dc2336cfe9807ade894fe6f7db516cb7aa
Score
8/10
Malware Config
Targets
-
- Target CrossBypass.exe
- Size 44.8MB
- SHA256 042a9accf93c7d5eeb64ef3aed3075dc2336cfe9807ade894fe6f7db516cb7aa
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Stops running service(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target yarakbesting.pyc
- Size 82KB
- SHA256 a26f17cea253b9836ed82c5623dfbfad603d6b856fdbf2080d53fb8c2860d8d5
Score3/10
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Create or Modify System Process
1Windows Service
1