General
-
Target
https://cdn.discordapp.com/attachments/1169014829235830866/1191759612567879721/HoaExternal.rar?ex=65a69ba1&is=659426a1&hm=ab9ab0c0bad33f7413557b4335d5987cce511cfa7179b678522af7f1cce71e3e&
-
Sample
240102-syx1csbch2
Score
7/10
Malware Config
Targets
-
-
Target
https://cdn.discordapp.com/attachments/1169014829235830866/1191759612567879721/HoaExternal.rar?ex=65a69ba1&is=659426a1&hm=ab9ab0c0bad33f7413557b4335d5987cce511cfa7179b678522af7f1cce71e3e&
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Registers COM server for autorun
-
Adds Run key to start application
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-