General
- Target Master.exe
- Size 75.8MB
- Sample260802-mjy18agg32
- SHA256 1fdbc2375716019bb46a869d223e23a2bfd4e5b5d205fb35b57717d3ca926f8e
Score
8/10
Malware Config
Targets
-
- Target Master.exe
- Size 75.8MB
- SHA256 1fdbc2375716019bb46a869d223e23a2bfd4e5b5d205fb35b57717d3ca926f8e
Score8/10-
Disables one or more Microsoft Defender components
Uses the Powershell Set-MpPreference cmdlet to disable one or more Microsoft Defender components.
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
3PowerShell
1Windows Command Shell
1Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Impair Defenses
2Disable or Modify System Firewall
1Disable or Modify Tools
1Modify Registry
1