Overview

overview

9

Static

static

3

Xillys_Pro....0.exe

windows11-21h2-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    xilly crak dsc.gg fncheatz.zip
  • Size 1.3MB
  • Sample261001-memsdswepf
  • SHA256 9fa95c4c3dcee5b665295803f7669148bd2a8a4084b16bdc53785d62259b3664
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
defense_evasiondiscoveryexecutionpersistenceransomware

Malware Config

Targets

    • Target
      Xillys_Program_6.0.exe
    • Size 1.7MB
    • SHA256 7fe4a5241395933b2cbe5e775ce04d5da5f951b0267a415dc095ebe330d219ad
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    defense_evasiondiscoveryexecutionpersistenceransomware

    • Modifies boot configuration data using bcdedit

    • Event Triggered Execution: Image File Execution Options Injection

      persistence

    • Loads dropped DLL

    • Indicator Removal: Clear Persistence

      remove IFEO.

      defense_evasion
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks