General

  • Target
    jaffacakes118_Trojan-GameThief.Win32.Nilage.mz.2a99a07f4f170bd83d726e0657696462
  • Size 30KB
  • Sample261011-2cb1fadv4z
  • SHA256 142617ee2d1aeb83321a0b2797d5484ae2318954377f3855465f53eaf1dcd179
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_Trojan-GameThief.Win32.Nilage.mz.2a99a07f4f170bd83d726e0657696462
    • Size 30KB
    • SHA256 142617ee2d1aeb83321a0b2797d5484ae2318954377f3855465f53eaf1dcd179
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks