General
- Target Software_v2.0.zip
- Size 570KB
- Sample260622-ry949adt8v
- SHA256 bf004e61b91646512d28610a6a1325ae4095efa239625915028be23668619d80
Score
8/10
Malware Config
Targets
-
- Target Application.cmd
- Size 29B
- SHA256 7e8bd9ba64fcbd1cb753baa2f7bc8d5d7f3e91552bcdc9ec1ec04edd4916ff33
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target compiler.exe
- Size 852KB
- SHA256 8b42ca9d05badf0e7327d816a56e5516431ae34627da68e12ae9347f365b2668
Score1/10 -
- Target dynasm.txt
- Size 301KB
- SHA256 f9436ccb986760ca379d6cd2f00726e032a1d9c250a9bd261d40d98b914e7ef9
Score3/10