General
- Target jaffacakes118_Backdoor.Win32.Aimbot.cv.6d46a6ccd94cde0129778f6bce9e91aa
- Size 61KB
- Sample261012-3vae1afe72
- SHA256 e1c0f4e3434f46ee4af8ed2a6f3185fb495975038e7a56c668fd8131dce06bed
Score
10/10
Malware Config
Targets
-
- Target jaffacakes118_Backdoor.Win32.Aimbot.cv.6d46a6ccd94cde0129778f6bce9e91aa
- Size 61KB
- SHA256 e1c0f4e3434f46ee4af8ed2a6f3185fb495975038e7a56c668fd8131dce06bed
Score10/10-
Modifies security service
-
Windows security bypass
-
Looks for VMWare Tools registry key
-
Deletes itself
-
Executes dropped EXE
-
Windows security modification
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
MITRE ATT&CK Enterprise v16
Defense Evasion
Impair Defenses
2Disable or Modify Tools
2Indicator Removal
1File Deletion
1Modify Registry
3Virtualization/Sandbox Evasion
1