General
- Target loader.exe
- Size 10.4MB
- Sample261027-kk55tada89
- SHA256 f4ad3294ad6d957097960720c9d154c3fc5875845acf1ced6a3f220407f3ca0f
Score
10/10
Malware Config
Targets
-
- Target loader.exe
- Size 10.4MB
- SHA256 f4ad3294ad6d957097960720c9d154c3fc5875845acf1ced6a3f220407f3ca0f
Score10/10-
Detects EnoriStealer
-
Family: EnoriStealer
EnoriStealer is a Windows infostealer with variants written in Go and Rust.
-
Executes dropped EXE
-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1