General
- Target Software-1.6.zip
- Size 480KB
- Sample260622-ry1ktads4m
- SHA256 8f368feb5bde81737c8870b7b71f464b4f073eec249977b30ece2f65840272b3
Score
8/10
Malware Config
Targets
-
- Target App.cmd
- Size 23B
- SHA256 52d3d2d4dd9b3166c60a45d2ce74b0506181cdff4aa971a74938b97c345e8b62
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target bcjit.ico
- Size 300KB
- SHA256 c83e8f78315df05fa798ac165db51e9a74ab8522d95f12e728413b14478675d3
Score3/10 -
- Target jit.exe
- Size 282KB
- SHA256 20ae7c65abd7cdb224d2973a9a01c1c8af12566ba9da75e6ac3ccc6b39c78ee6
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target lua51.dll
- Size 381KB
- SHA256 03a6e069a3af6c9905293868668280bac89d024e00c99e4313515a4f5f038401
Score1/10