General
- Target https://cdn.discordapp.com/attachments/1250878175253368953/1250878285722943652/sigmahacks0.2.exe?ex=666c8aaf&is=666b392f&hm=29fec15a2e72fea1d7896b9370d2d72cb69c7f54630cdc20bb3f17e1fd7f1d87&
- Sample240613-w4b7maxfme
Score
8/10
Malware Config
Targets
-
- Target https://cdn.discordapp.com/attachments/1250878175253368953/1250878285722943652/sigmahacks0.2.exe?ex=666c8aaf&is=666b392f&hm=29fec15a2e72fea1d7896b9370d2d72cb69c7f54630cdc20bb3f17e1fd7f1d87&
Score8/10-
Downloads MZ/PE file
-
Sets file execution options in registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Registers COM server for autorun
-
Checks whether UAC is enabled
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.