General
- Target star.zip
- Size 6.7MB
- Sample260910-h65p3azdnf
- SHA256 da49d8860aa6fce3cc3833903562c7ebadb443018e1a42dd203b922511cdb224
Score
8/10
Malware Config
Targets
-
- Target star.exe
- Size 6.8MB
- SHA256 e41ff6c5fa373f9c458ba7b49da437c7aebc54b48073c1bb67dbe945dc9e2b80
Score7/10-
VMProtect packed file
Detects executables packed with VMProtect commercial packer.
-
Checks whether UAC is enabled
-
Network Share Discovery
Attempt to gather information on host network.
-
- Target star_jewhunting.exe
- Size 493KB
- SHA256 64b5f1fe5d8593a2cee70d3b3a562b31a506e840ecd729531f7994c626c9bdcc
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Loads dropped DLL
-
Hide Artifacts: Hidden Window
Windows that would typically be displayed when an application carries out an operation can be hidden.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
3PowerShell
1Windows Command Shell
1Defense Evasion
Hide Artifacts
1Hidden Window
1Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2