General
- Target Installer-1.1.0.exe
- Size 9.8MB
- Sample260823-ajksdagg98
- SHA256 7d369ef21a49e0bcfd7875d2e000a5c6bb592e00f305e139a188f40b3dc32249
Score
8/10
Malware Config
Targets
-
- Target Installer-1.1.0.exe
- Size 9.8MB
- SHA256 7d369ef21a49e0bcfd7875d2e000a5c6bb592e00f305e139a188f40b3dc32249
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Network Share Discovery
Attempt to gather information on host network.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Component Object Model Hijacking
1