General
-
Target
https://cdn.discordapp.com/attachments/1223429159263539412/1261126745114022021/pc_check_all.rar?ex=66927c0e&is=66912a8e&hm=ee089c88c618f0771622bd29c8e4d3980f5d448009ee0f025432ac245a415da0&
-
Sample
240712-ssm8zazapm
Score
9/10
Malware Config
Targets
-
-
Target
https://cdn.discordapp.com/attachments/1223429159263539412/1261126745114022021/pc_check_all.rar?ex=66927c0e&is=66912a8e&hm=ee089c88c618f0771622bd29c8e4d3980f5d448009ee0f025432ac245a415da0&
Score9/10-
Detected Nirsoft tools
Free utilities often used by attackers which can steal passwords, product keys, etc.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-