General
- Target RDPWrapX-v2.0.18.exe
- Size 6.8MB
- Sample260722-pg7xfs1tfw
- SHA256 91ca48546e554ebda32ea07b2f42fe29e81ed8d6ed4cabf7bf91297f643cbce0
Score
8/10
Malware Config
Targets
-
- Target RDPWrapX-v2.0.18.exe
- Size 6.8MB
- SHA256 91ca48546e554ebda32ea07b2f42fe29e81ed8d6ed4cabf7bf91297f643cbce0
Score8/10-
Modifies RDP port number used by Windows
-
Modifies Windows Firewall
-
Allows Network login with blank passwords
Allows local user accounts with blank passwords to access device from the network.
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
1