General
- Target DEKTEAMUIDfixed.exe
- Size 13.2MB
- Sample260718-k3bc6aey8q
- SHA256 527a0b88fe2b8bba4e06e25df95a86765cff33d9dab4d0c7670acb1eada5ac5d
Score
10/10
Malware Config
Targets
-
- Target DEKTEAMUIDfixed.exe
- Size 13.2MB
- SHA256 527a0b88fe2b8bba4e06e25df95a86765cff33d9dab4d0c7670acb1eada5ac5d
Score10/10-
Modifies firewall policy service
-
Downloads MZ/PE file
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
2Windows Service
2Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
2Windows Service
2Event Triggered Execution
1Netsh Helper DLL
1