General
- Target Program.exe
- Size 16.1MB
- Sample260802-tnvmxssvaz
- SHA256 bab070cae6c3e305b10a3f98acfa0b7bba58143cf32744a6a4168bda61c29da9
Score
10/10
Malware Config
Targets
-
- Target Program.exe
- Size 16.1MB
- SHA256 bab070cae6c3e305b10a3f98acfa0b7bba58143cf32744a6a4168bda61c29da9
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Executes a VBScript file via the Windows Script Host.
-
Hide Artifacts: Hidden Files and Directories
-
- Target tmpotw9t1vg.pyc
- Size 25.6MB
- SHA256 7001e5286326a24a97143e289becdaad97a3a55c53c1a914d4c374fffbea9d67
Score3/10
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2Visual Basic
1Windows Command Shell
1Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Modify Registry
2