General
- Target AnoklesEmulator (2).exe
- Size 13.2MB
- Sample260821-1j833sstat
- SHA256 facc0b46f9b02d749b0f2379a32cc3e3d26aa9d790a69b36d33e7ff748b4034a
Score
7/10
Malware Config
Targets
-
- Target AnoklesEmulator (2).exe
- Size 13.2MB
- SHA256 facc0b46f9b02d749b0f2379a32cc3e3d26aa9d790a69b36d33e7ff748b4034a
Score7/10-
Creates new service(s)
-
Loads dropped DLL
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
-
- Target vg_engine.pyc
- Size 232KB
- SHA256 7f2dcbc2605eed735b08d3ae74144d9a623a972f5075af5f8e76acc9cd35d583
Score3/10
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
3PowerShell
1Windows Command Shell
1System Services
1Service Execution
1Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1