General
- Target monkey-d-luffy-5120x2880-25499.jpg
- Size 5.9MB
- Sample260924-lncs4sszex
- SHA256 dc0feacaac15969197a37cca7c88d787c6a85be4d223b2bbc7f38c28ae27c536
Score
8/10
Malware Config
Targets
-
- Target monkey-d-luffy-5120x2880-25499.jpg
- Size 5.9MB
- SHA256 dc0feacaac15969197a37cca7c88d787c6a85be4d223b2bbc7f38c28ae27c536
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Netsh Helper DLL
1