General
- Target Software-3.5.zip
- Size 451KB
- Sample260622-ry31yads7x
- SHA256 975b9f078f1c8574097a0c9caa41482cf31639550ad9370b6e6bd1a5733ca905
Score
8/10
Malware Config
Targets
-
- Target Application.cmd
- Size 24B
- SHA256 305729e83fa3aaf806c72e3b656a7114748a1a75d7e391fb9529eb824c1923fb
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target loader.exe
- Size 31KB
- SHA256 7ad4b911d05a12f91ab27ba3baa351a56653ca099dda7ad87ee2b94f8cd018c9
Score1/10 -
- Target lua51.dll
- Size 587KB
- SHA256 04d3c82782927330d56827ff551697666dbab4b3abf5b86bde492efdd142bc58
Score1/10 -
- Target sdx.o
- Size 293KB
- SHA256 4c1ec56cc133765e635378a240e1a407d86898b325c05370634c6501938fecea
Score3/10