General
- Target Software_1.3.zip
- Size 518KB
- Sample260622-r4ycmsdw2w
- SHA256 d5d4dd295c2d17738f752694fce2ec0403701b53394082f9ccf97be604c7a028
Score
8/10
Malware Config
Targets
-
- Target Application.cmd
- Size 29B
- SHA256 3658fc38c10867e30e3c5c98a7a392e452a4ba497c8a674ff26554bc09f032b0
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target func.txt
- Size 301KB
- SHA256 76afe60e675e68906a2de61d45c46aa6502fe7f9c298260c226a4382744f4212
Score3/10 -
- Target lua51.dll
- Size 477KB
- SHA256 09e0f7616dfd2f7eb2876f6ef7331d6dbc78775acd594a94b0397a56717d1fcc
Score1/10 -
- Target selector.exe
- Size 286KB
- SHA256 bff0904456e3151221d29ed1d7c88fc31587efbdfb28817cdcb7ec7f20cade21
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.