General
-
Target
https://cdn.discordapp.com/attachments/1149469239963562126/1179827307142197278/H.UNBAN.rar?ex=65fc65ce&is=65e9f0ce&hm=25656e5edaecf764bb1819fa455683eccc742089880b3aa5d5b45fef24f0e52d&
-
Sample
240308-x5ngqafb7w
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://cdn.discordapp.com/attachments/1149469239963562126/1179827307142197278/H.UNBAN.rar?ex=65fc65ce&is=65e9f0ce&hm=25656e5edaecf764bb1819fa455683eccc742089880b3aa5d5b45fef24f0e52d&
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
https://cdn.discordapp.com/attachments/1149469239963562126/1179827307142197278/H.UNBAN.rar?ex=65fc65ce&is=65e9f0ce&hm=25656e5edaecf764bb1819fa455683eccc742089880b3aa5d5b45fef24f0e52d&
Score10/10-
Nirsoft
-
Stops running service(s)
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-