General
- Target 88ai75.zip
- Size 76.6MB
- Sample260808-xr8whatamf
- SHA256 1a778a282006969281e83c5102252cda1bcb896e972cb59000d0f177ce919f1d
Score
8/10
Malware Config
Targets
-
- Target Loader.exe
- Size 59.9MB
- SHA256 a414ef0e41811a92bb5be4237136422c1ae38491e60a53abfc44a1426e45e497
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to get system information as a root user.
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
-
- Target driver-x64.dll
- Size 54.0MB
- SHA256 575ad04aad19034af4862fcaa8991fdc3a87d07d2d136787e1c84c2f8bcb4532
Score6/10-
Adds Run key to start application
-
Drops file in System32 directory
-
- Target vcruntime140.dll
- Size 85KB
- SHA256 fbbab0c52138bb54f691e9764b43b3153047b989fa969b51bb695fca3639f3ba
Score1/10
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1