General
- Target file_9022b6350736111c.exe
- Size 6.6MB
- Sample260816-w16basvtgw
- SHA256 520501b124e2b8d3935693f556e3446ee8be319ba420a7a6c78e5a0d80ea7dbc
Score
8/10
Malware Config
Targets
-
- Target file_9022b6350736111c.exe
- Size 6.6MB
- SHA256 520501b124e2b8d3935693f556e3446ee8be319ba420a7a6c78e5a0d80ea7dbc
Score8/10-
Uses browser remote debugging
Can be used to control the browser and steal sensitive information such as credentials and session cookies.
-
Executes dropped EXE
-
Adds Run key to start application
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Modify Authentication Process
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Authentication Process
1Modify Registry
2Subvert Trust Controls
2Install Root Certificate
2