General
- Target 40866c7d90b9005b1b16824eb3ea45d558adc429dfaf6ee42ff8d7e748be0dc7
- Size 795KB
- Sample260830-3mckdsdh45
- SHA256 40866c7d90b9005b1b16824eb3ea45d558adc429dfaf6ee42ff8d7e748be0dc7
Score
7/10
Malware Config
Targets
-
- Target payment swift.exe
- Size 1.1MB
- SHA256 c9599b46b1e5c927a2b83f2a139c70ef82ed8663ac3f5b1c427fd7969e792809
Score7/10-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1