General
- Target https://cdn.discordapp.com/attachments/1566808050579415181/1566809932811210762/Aljaheem_Theme.rar?ex=6aee8235&is=6aed30b5&hm=7735767862d5a014d5dfc3b74f1e36a1ce3760809d5bb0812217aac873b3a5f6&
- Sample261106-gkc79aah88
Score
8/10
Malware Config
Targets
-
- Target https://cdn.discordapp.com/attachments/1566808050579415181/1566809932811210762/Aljaheem_Theme.rar?ex=6aee8235&is=6aed30b5&hm=7735767862d5a014d5dfc3b74f1e36a1ce3760809d5bb0812217aac873b3a5f6&
Score8/10-
Possible privilege escalation attempt
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
File and Directory Permissions Modification: Windows File and Directory Permissions Modification
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
2Windows File and Directory Permissions Modification
1