General
- Target cmtat_tokenized_icma_bonds_3.2.zip
- Size 503KB
- Sample260622-r4ycmsdw2y
- SHA256 964d2c9c744195cad8765b6ae4e3e811f7522e726532355618be3ef564740f79
Score
8/10
Malware Config
Targets
-
- Target Launch.cmd
- Size 21B
- SHA256 37f60b7923dae8ab38bb72ccfe94bf06c3266202d4881e9d2e0ac28abcd85b25
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target gcc.exe
- Size 636KB
- SHA256 2ea6200c846af534a07338a803acf7f49520abf59b2ae82a701a24e7fada0b97
Score3/10 -
- Target ptd.txt
- Size 301KB
- SHA256 a563a7df740bce2bda1231cebb4ed136813df43361de17c224b97af9941ee0c4
Score3/10