General
- Target cheat.exe
- Size 479KB
- Sample261107-sdnwysy1cs
- SHA256 803f0b646b2429bf6b0ea251874614238c5e01c309bf0b2508cfc324f9654bd4
Score
10/10
Malware Config
Targets
-
- Target cheat.exe
- Size 479KB
- SHA256 803f0b646b2429bf6b0ea251874614238c5e01c309bf0b2508cfc324f9654bd4
Score10/10Modifies WinLogon for persistence
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Adds Run key to start application
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
3Active Setup
1Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Pre-OS Boot
1Bootkit
1