General
- Target Software-1.6.zip
- Size 503KB
- Sample260622-rrfxtsc181
- SHA256 caa886ed6b48991e43027856cbc9d6178eb85bc7de020f3170dd75bd6ada8e41
Score
8/10
Malware Config
Targets
-
- Target Launch.cmd
- Size 21B
- SHA256 37f60b7923dae8ab38bb72ccfe94bf06c3266202d4881e9d2e0ac28abcd85b25
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target gcc.exe
- Size 636KB
- SHA256 2ea6200c846af534a07338a803acf7f49520abf59b2ae82a701a24e7fada0b97
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target ptd.txt
- Size 301KB
- SHA256 a563a7df740bce2bda1231cebb4ed136813df43361de17c224b97af9941ee0c4
Score3/10