General
- Target idforever.exe
- Size 845KB
- Sample260820-vw28easbkg
- SHA256 1cfe2ec0e72a66e9807f16672ce2943d3fd558ec2c90888b852ffb9533452815
Score
8/10
Malware Config
Targets
-
- Target idforever.exe
- Size 845KB
- SHA256 1cfe2ec0e72a66e9807f16672ce2943d3fd558ec2c90888b852ffb9533452815
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1