General
- Target BypAI.zip
- Size 7.2MB
- Sample260808-svj94attfs
- SHA256 2b4e3692a542d1bad5cd2386caac14c32f177793dbe5c046c1b446a0b179b100
Score
8/10
Malware Config
Targets
-
- Target BypAI/BypAI-Client.exe
- Size 158KB
- SHA256 52c72b9d4607bd505f489c6983437950626e834a5c99512a2ab2fc2a49b19552
Score8/10Downloads MZ/PE file
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1