General
- Target file.exe
- Size 13.2MB
- Sample260827-c7n6tadj3v
- SHA256 afb630b2489f1626c81f8af7c83608aa4cb44fea0a685a93fcc9928d07f429b2
Score
8/10
Malware Config
Targets
-
- Target file.exe
- Size 13.2MB
- SHA256 afb630b2489f1626c81f8af7c83608aa4cb44fea0a685a93fcc9928d07f429b2
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Uses browser remote debugging
Can be used to control the browser and steal sensitive information such as credentials and session cookies.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Modify Authentication Process
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1