General
- Target stack-koda-3.3.zip
- Size 518KB
- Sample260622-ry3p6sds7w
- SHA256 73aa1ed53f60dfe44220d44bb9a478d33deb44dab52a413adc1d405993fbc76c
Score
8/10
Malware Config
Targets
-
- Target Application.cmd
- Size 29B
- SHA256 3658fc38c10867e30e3c5c98a7a392e452a4ba497c8a674ff26554bc09f032b0
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target func.txt
- Size 301KB
- SHA256 76afe60e675e68906a2de61d45c46aa6502fe7f9c298260c226a4382744f4212
Score3/10 -
- Target lua51.dll
- Size 477KB
- SHA256 09e0f7616dfd2f7eb2876f6ef7331d6dbc78775acd594a94b0397a56717d1fcc
Score1/10 -
- Target selector.exe
- Size 286KB
- SHA256 bff0904456e3151221d29ed1d7c88fc31587efbdfb28817cdcb7ec7f20cade21
Score1/10