General

  • Target
    jaffacakes118_Trojan-GameThief.Win32.Nilage.hqk.9016471cbb96cbbe062e50663a24a6cd
  • Size 2.9MB
  • Sample261011-2bae8a113r
  • SHA256 7e0bf870489e0bb16bec39b0b8650cd61e6106c15d4cee70132e085c9d36db72
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_Trojan-GameThief.Win32.Nilage.hqk.9016471cbb96cbbe062e50663a24a6cd
    • Size 2.9MB
    • SHA256 7e0bf870489e0bb16bec39b0b8650cd61e6106c15d4cee70132e085c9d36db72
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Possible privilege escalation attempt

    • Executes dropped EXE

    • Modifies file permissions

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks