General
- Target result-better-3.9.zip
- Size 534KB
- Sample260622-rrfl3ac18y
- SHA256 2b16465de95810571b4f7eb8ef994e399743ab5252f4ba581db61bb40f55f242
Score
8/10
Malware Config
Targets
-
- Target LaunchApp.bat
- Size 23B
- SHA256 a3e6236fa517f863ea551e17fcedcfc22df23e044dcd4863e6ddf3ef00966596
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target icon.txt
- Size 302KB
- SHA256 772ce19206d35699b4d2693c59f8c0bd1a927f287f8bf98bd14d65f1ff248828
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target init.exe
- Size 753KB
- SHA256 ac5885b78810a7bf987ff6674f6717059e227df9c969b9fb46d00b2c0de1ba74
Score1/10
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1JavaScript
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Active Setup
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Scheduled Task/Job
1Scheduled Task
1