Overview

overview

8

Static

static

3

AeroSwap(1).exe

windows10-2004-x64

8

AeroSwap(1).exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    AeroSwap(1).exe
  • Size 33.3MB
  • Sample261024-vwpmbacz5m
  • SHA256 2faa60d6b848da0b703513e5d4dfc3862cb6f0a7b875c2a5e44f44740aa2edab
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryspywaretrojan

Malware Config

Targets

    • Target
      AeroSwap(1).exe
    • Size 33.3MB
    • SHA256 2faa60d6b848da0b703513e5d4dfc3862cb6f0a7b875c2a5e44f44740aa2edab
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    defense_evasiondiscoveryspywaretrojan

    • Drops file in Drivers directory

    • Installs a root certificate to the trusted certificate store

      A root certificate was added to the trusted certificate store using CertUtil.

      defense_evasion

    • Checks whether UAC is enabled

      defense_evasiontrojan

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks