General
- Target FadeSEC.exe
- Size 16.2MB
- Sample260819-wvg2hszdmc
- SHA256 7c9541b7fa210acbb05364e6c5ccb549572f0b8586a0ab3a12b022081d59db8c
Score
10/10
Malware Config
Targets
-
- Target FadeSEC.exe
- Size 16.2MB
- SHA256 7c9541b7fa210acbb05364e6c5ccb549572f0b8586a0ab3a12b022081d59db8c
Score10/10-
Modifies Windows Defender DisableAntiSpyware settings
-
Modifies Windows Defender Real-time Protection settings
-
Enumerates VirtualBox registry keys
-
Renames multiple (227) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Looks for VMWare services registry key.
-
Modifies Windows Firewall
-
Drops desktop.ini file(s)
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
3Windows Service
3Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
3Windows Service
3Event Triggered Execution
1Netsh Helper DLL
1