General
- Target 2MASS J07225830-2546030.zip
- Size 138KB
- Sample260905-wcyljszamf
- SHA256 db1d8bc3f4a02fb4e6cc5769cb9ee40bc8142800224772c367038d770305d4d9
Score
8/10
Malware Config
Targets
-
- Target 2MASS J07225830-2546030.exe
- Size 165KB
- SHA256 b2d5540346a4209f08972cea5a0c0544082290d5a97166d26dc28b01a820b93c
Score8/10-
Disables Task Manager via registry modification
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Modifies system executable filetype association
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
- Target 2MASS J07225830-2546030.harmless.exe
- Size 123KB
- SHA256 c1ee8cda5453171d0cc998c3049454587838560d4d40f67be1502d49fc25dbb4
Score3/10
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Pre-OS Boot
1Bootkit
1