General
-
Target
https://cdn.discordapp.com/attachments/1302716374694629517/1327568380349255680/voidware_full_leak_hackvshack.net.zip?ex=678389e6&is=67823866&hm=4f500af31f074f54f4428f05cde5584d58a40e7a5d9ac1a2b0bbba4e690b32e9&
-
Sample
250111-lcgb6avjhs
Score
8/10
Malware Config
Targets
-
-
Target
https://cdn.discordapp.com/attachments/1302716374694629517/1327568380349255680/voidware_full_leak_hackvshack.net.zip?ex=678389e6&is=67823866&hm=4f500af31f074f54f4428f05cde5584d58a40e7a5d9ac1a2b0bbba4e690b32e9&
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Detected potential entity reuse from brand STEAM.
-