General
- Target DefiantTemp.exe
- Size 2.5MB
- Sample260814-ndmxfaal6z
- SHA256 cf879327604c2a053484eda906b583a9a3136f9a26e405c139d99a19100d7557
Score
8/10
Malware Config
Targets
-
- Target DefiantTemp.exe
- Size 2.5MB
- SHA256 cf879327604c2a053484eda906b583a9a3136f9a26e405c139d99a19100d7557
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1