General
- Target onionoo_fastapi_v1.8.zip
- Size 535KB
- Sample260622-ry5jrsds91
- SHA256 e15df1e1cf0e8d343edc73d8088a0653efa4d6095f55c50baa4500f4cf364f16
Score
8/10
Malware Config
Targets
-
- Target launcher.cmd
- Size 27B
- SHA256 ccd107dc7de92cc112f656d433f95db249d6ab04a72622a4d4528863b56939d1
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target luajit.exe
- Size 720KB
- SHA256 1a970a1e390ce3ecd02d531d94e76fd2b33db14f2869f4b9e4b3385f31d6d952
Score3/10 -
- Target opcode.txt
- Size 350KB
- SHA256 862fe8cfdadb00fb307d0ac51515ed23145fb2ecd7e9d4c85a6586b6fc398b87
Score3/10