SLICKSHOES
Description
(US-CERT) This sample is a Themida-packed dropper that decodes and drops a file ‘C:\Windows\Web\taskenc.exe’ which is a Themida-packed beaconing implant. The beaconing implant does not execute the dropped file nor does it schedule any tasks to run the malware. The dropped beaconing implant uses an indigenous network encoding algorithm and is capable of many features including conducting system surveys, file upload/download, process and command execution, and screen captures.
Names
| Name |
|---|
| SLICKSHOES |
Category
Malware
Type
- Reconnaissance
- Dropper
- Backdoor
- Info stealer
- Exfiltration
Information
Malpedia
Alienvault Otx
Other Information
Uuid
b21f7e86-bebd-47fb-a24f-89af8ac4726d
Last Card Change
2021-04-24