General
- Target LLM_v_Cat_2.9.zip
- Size 571KB
- Sample260622-rraqtacz4l
- SHA256 fca024e5ec976a7a38944c09a2e454fec6e08f3de8df22f8233b4f12896cd8fa
Score
8/10
Malware Config
Targets
-
- Target Application.bat
- Size 25B
- SHA256 c3b56d68c80c4a6a9879c45a7761a538e3546644623af1ee469d3b70130fa0cd
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target tree.txt
- Size 301KB
- SHA256 a93ac4fb3f9dadc22f7b7f1877bc99b84a77fe3bbe560bdd20bbd7c4b6f9c1d6
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target util.exe
- Size 852KB
- SHA256 d56213d08fb10c880f17e1a262bf1176cf234d1fc591188171e7be9cd856eb12
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.