General
- Target dr_c_3.7.zip
- Size 482KB
- Sample260622-ryvdssc17q
- SHA256 3d6a21be69ff330b7ff0d6ec2952e3429078351a2c89bbbee4bd4ea6b5f605e6
Score
8/10
Malware Config
Targets
-
- Target StartApp.bat
- Size 22B
- SHA256 1546f3bbd5bd8d2b09351ceca40ee166fa023f250d255ca5d7496b556ad44d7c
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target asm.txt
- Size 302KB
- SHA256 3399c30308d8adfd2bb829adf28339e6290db819531a1e418a9410993e4f8618
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target lua51.dll
- Size 381KB
- SHA256 3597925a47270ac5346dae3327df5946372aac8a0a7bd1eae33fcf277356997d
Score1/10 -
- Target luau.exe
- Size 282KB
- SHA256 6a713cdf2091477786da85e9553924b768c4754c134e24edc83045f3ea26508f
Score1/10