General
- Target Test.zip
- Size 361KB
- Sample260817-ry87yssdje
- SHA256 a16864e532878a908716f930ac022a9d75c86a2394e4aa4df84b90c2a0056e89
Score
9/10
Malware Config
Targets
-
- Target Test.exe
- Size 392KB
- SHA256 8cdffe6a426c8eb9499b596e390ae20102b7ed6219c82e700ed351784d589500
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables Task Manager via registry modification
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Creates a new local user account
Uses net.exe to create a new local user account, often for persistence or a backdoor account.
-
- Target getP.dll
- Size 101KB
- SHA256 3b2deece9e74a0235ee16ea0e571d114671395eefac8b5b5eb66e7224844e644
Score1/10
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create Account
1Local Account
1Privilege Escalation
Account Manipulation
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1