General

  • Target
    Setup_stripped.exe
  • Size 14KB
  • Sample260822-wc2yzastbs
  • SHA256 b349e62c28f45d8b73f838f43df154e9c79e7540ee0f4dc491bf25de02e63584
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Setup_stripped.exe
    • Size 14KB
    • SHA256 b349e62c28f45d8b73f838f43df154e9c79e7540ee0f4dc491bf25de02e63584
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Power Settings

      powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.

MITRE ATT&CK Enterprise v16

Tasks