General
- Target Loader.exe
- Size 60.4MB
- Sample260823-e5mw3sxwcy
- SHA256 8ef91cbb3ec1eb479ce00c4661e19f6e9e7fb3be97a02be63608cbcd63c51280
Score
10/10
Malware Config
Targets
-
- Target Loader.exe
- Size 60.4MB
- SHA256 8ef91cbb3ec1eb479ce00c4661e19f6e9e7fb3be97a02be63608cbcd63c51280
Score10/10-
Detects Overlord RAT
-
Family: Overlord
Overlord is an open-source Windows RAT written in Golang.
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2