General
- Target support.client.exe
- Size 81KB
- Sample260913-lnjxesvgpc
- SHA256 da4dfa5e507eab85d79124743c4a78ac8dfea42f58d0392ba29be450c5737fab
Score
8/10
Malware Config
Targets
-
- Target support.client.exe
- Size 81KB
- SHA256 da4dfa5e507eab85d79124743c4a78ac8dfea42f58d0392ba29be450c5737fab
Score8/10-
Downloads MZ/PE file
-
Manipulates Digital Signatures
Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.
-
Signed with revoked ConnectWise certificate
Binary is signed using a ConnectWise certificate revoked for key compromise.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
3Install Root Certificate
1SIP and Trust Provider Hijacking
2