General
- Target Claude Setup.exe
- Size 35.5MB
- Sample260719-3hlmhaf13l
- SHA256 152bcf315a4a47e91a156e60f372b0f5967d025e6f76fe7bb85ac0d284dcdaa5
Score
8/10
Malware Config
Targets
-
- Target Claude Setup.exe
- Size 35.5MB
- SHA256 152bcf315a4a47e91a156e60f372b0f5967d025e6f76fe7bb85ac0d284dcdaa5
Score8/10Downloads MZ/PE file
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
Drops desktop.ini file(s)
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1