General
- Target v49922.exe
- Size 1.3MB
- Sample260719-wt2drsa12t
- SHA256 03a3b3b2a9a5589a715f18c7d9e190d38ec7b55a4f58ecdc9842522060f8f03e
Score
7/10
Malware Config
Targets
-
- Target v49922.exe
- Size 1.3MB
- SHA256 03a3b3b2a9a5589a715f18c7d9e190d38ec7b55a4f58ecdc9842522060f8f03e
Score7/10-
Drops startup file
-
Registers new Windows logon scripts automatically executed at logon.
-
Adds Run key to start application
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Boot or Logon Initialization Scripts
1Logon Script (Windows)
1Scheduled Task/Job
1Scheduled Task
1