General
- Target VanishSetup (2).exe
- Size 155.6MB
- Sample260803-qfkk7saa55
- SHA256 f8a4f2a9e3ebf0b1cfd7a79bf215e45358f883927411411ead67a9b930946d05
Score
8/10
Malware Config
Targets
-
- Target VanishSetup (2).exe
- Size 155.6MB
- SHA256 f8a4f2a9e3ebf0b1cfd7a79bf215e45358f883927411411ead67a9b930946d05
Score8/10-
Modifies Windows Firewall
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Hide Artifacts
1Ignore Process Interrupts
1Impair Defenses
1Disable or Modify System Firewall
1