General
- Target 25560431666.zip
- Size 2.7MB
- Sample260727-ve1m9axcrc
- SHA256 28a0fb1e3c5494ef6ba8c6000e580d759f97cc7a33334c8b82a66ed5369e871d
Score
8/10
Malware Config
Targets
-
- Target 55825aa712f33bdad11f89ea60a29c2124da9beb540c392d3d251b1d3b8d233d
- Size 2.8MB
- SHA256 55825aa712f33bdad11f89ea60a29c2124da9beb540c392d3d251b1d3b8d233d
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Registers new Windows logon scripts automatically executed at logon.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Boot or Logon Initialization Scripts
1Logon Script (Windows)
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Boot or Logon Initialization Scripts
1Logon Script (Windows)
1