General

  • Target
    svchost_helper.exe
  • Size 8.7MB
  • Sample260919-ppynrafd64
  • SHA256 ead93db30a67f46f0f5c79e8e5c3edaa9291951be4f6dcade1e61dd419e027ba
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      svchost_helper.exe
    • Size 8.7MB
    • SHA256 ead93db30a67f46f0f5c79e8e5c3edaa9291951be4f6dcade1e61dd419e027ba
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Possible privilege escalation attempt

    • Loads dropped DLL

    • Modifies file permissions

    • File and Directory Permissions Modification: Windows File and Directory Permissions Modification

    • Modifies boot configuration data using bcdedit

MITRE ATT&CK Enterprise v16

Tasks