General
- Target abletonPatcher-master.zip
- Size 11KB
- Sample260724-pvdwjazgrc
- SHA256 fb502b6720ad9f79bd68d395227e9efa71d93abfb1d2388281944fecbd9183d9
Malware Config
Targets
-
- Target abletonPatcher-master.zip
- Size 11KB
- SHA256 fb502b6720ad9f79bd68d395227e9efa71d93abfb1d2388281944fecbd9183d9
Score8/10-
Manipulates Digital Signatures
Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Network Share Discovery
Attempt to gather information on host network.
-
Drops file in System32 directory
-
- Target abletonPatcher-master/.gitignore
- Size 14B
- SHA256 1757df678cff3ed622e1a5ef438afa586307c6c45b5896d02817889c1af932cc
Score3/10 -
- Target abletonPatcher-master/README.md
- Size 3KB
- SHA256 70bfa36466d73ae87e5d7cfc19090139a3adeb5666bc755064a46487e6c6ae42
Score3/10 -
- Target abletonPatcher-master/abletonCracker.py
- Size 20KB
- SHA256 14512d983bb5c071b5dd2fba3dcd17a411d1284e69e3349b529149b6bf3d5275
Score3/10 -
- Target abletonPatcher-master/config.json
- Size 5KB
- SHA256 a2cd511b14aa4ff24f4ce730c572aa54059a1a55a8bdf6226d2d66f3d6972c93
Score3/10 -
- Target abletonPatcher-master/quickstart.cmd
- Size 5KB
- SHA256 1b2e86142b08fb9fcf1fe8987fefa6d6e14da3fc59ac84df49be90f955b52525
Score3/10 -
- Target abletonPatcher-master/requirements.txt
- Size 21B
- SHA256 4793d72950fd9a4f540c3c26bc7d1486cf4d072ca568a58cc857ff81aa4eec54
Score3/10
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Defense Evasion
Modify Registry
2Subvert Trust Controls
3Install Root Certificate
2SIP and Trust Provider Hijacking
1Discovery
Browser Information Discovery
1Network Share Discovery
1Peripheral Device Discovery
2Query Registry
5System Information Discovery
6System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1