General
- Target dnSpy-net-win64.zip
- Size 94.9MB
- Sample260621-vpdapse17x
- SHA256 8ed48f165dc355e869f3a0037ad4f9216147f995a5ae0258b296eeef1f73aab0
Malware Config
Targets
-
- Target bin/System.Composition.TypedParts.dll
- Size 64KB
- SHA256 ebc942c358d997e41635c9a365db542a3fd2a05f301f602d5d6a8b0d5dd42071
Score1/10 -
- Target bin/System.Configuration.ConfigurationManager.dll
- Size 1021KB
- SHA256 e99979abcd01edf1496b806250c3c83f9c2262dbf6d46e15db3f5a4a18fc4233
Score1/10 -
- Target bin/System.Configuration.dll
- Size 18KB
- SHA256 b4eb54b12477324bd48a7b31553ac5b407e5f3016170ca7a1a6987e568cabc2e
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bin/System.Console.dll
- Size 165KB
- SHA256 07313d866c7e63c8e197b49389bf6c8fc7f14a23d21c9f8851743a45c6d6b305
Score1/10 -
- Target bin/System.Core.dll
- Size 22KB
- SHA256 0028df97a8bc980612c9307e955bbb484d8b896942ccf11f3fb83be8f095ecd0
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bin/System.Data.Common.dll
- Size 2.6MB
- SHA256 edff10951101269bfd3ea05c722f724c3e4cb337801209c3b4cbb32b7844f298
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bin/System.Data.DataSetExtensions.dll
- Size 15KB
- SHA256 cdf705bbec712be45beab5fef030c35839f86249044ef97776b6233c7d742ad3
Score1/10 -
- Target bin/System.Data.dll
- Size 24KB
- SHA256 80124b86561d529f986b4f539b09b957555d82a1dc4cd42a184096bbaa9258f6
Score1/10 -
- Target bin/System.Design.dll
- Size 22KB
- SHA256 76f733db9788318eab3d8c9b8a369ee1ebfa15a61d09d46aaf857ed9e671b905
Score1/10 -
- Target bin/System.Diagnostics.Contracts.dll
- Size 15KB
- SHA256 00c65d5b567ca6eb3d9688e5e43aa526efec14c02b87cd1dcb52e70087fc28bf
Score1/10 -
- Target bin/System.Diagnostics.Debug.dll
- Size 15KB
- SHA256 313f40e64ad892cb72f7892969fcb833a751c9e8b5ddaa498c5597bc04ae7ea5
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bin/System.Diagnostics.DiagnosticSource.dll
- Size 489KB
- SHA256 659102f1bd66b38a5416ecc387f90881d9afb99ee3a32df66f21711424af16d1
Score1/10 -
- Target bin/System.Diagnostics.EventLog.Messages.dll
- Size 781KB
- SHA256 5902ae820e3e42de683999e65383b111110174337811a40573a3f7e39ebb42e8
Score1/10 -
- Target bin/System.Diagnostics.EventLog.dll
- Size 357KB
- SHA256 dc55370acee2b234981f2ecd39ce74ab15ee2907a6d69f30fc908fab848a9027
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bin/System.Diagnostics.FileVersionInfo.dll
- Size 45KB
- SHA256 8fdb8e65845e0eebc8d633811230a2a09209f003caefbc1512ef8190c1013e20
Score1/10 -
- Target bin/System.Diagnostics.PerformanceCounter.dll
- Size 293KB
- SHA256 04bbd7b6d217b808bd00b5c76eccda7b36e26429df762743373da4a6a7ea587c
Score1/10