General
- Target 004fdf6f6ebacf350f2367114ab8aa1d54e7a3860ec014c7d2717fdd6f9035e7.exe
- Size 400KB
- Sample261002-gry4astsf1
- SHA256 004fdf6f6ebacf350f2367114ab8aa1d54e7a3860ec014c7d2717fdd6f9035e7
Score
8/10
Malware Config
Targets
-
- Target 004fdf6f6ebacf350f2367114ab8aa1d54e7a3860ec014c7d2717fdd6f9035e7.exe
- Size 400KB
- SHA256 004fdf6f6ebacf350f2367114ab8aa1d54e7a3860ec014c7d2717fdd6f9035e7
Score8/10-
Adds policy Run key to start application
-
Drops file in Drivers directory
-
Executes a file named after a Windows system binary
The file runs from a user directory while carrying the name of an executable that normally only exists in System32.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Defense Evasion
Masquerading
1Match Legitimate Name or Location
1Modify Registry
2