General
- Target MG_Spatial_Demo_Selection_v3.3.zip
- Size 571KB
- Sample260622-ryyffsds61
- SHA256 c8fa560694685adce0de0f7b3de90dba2f51317c0a76d5543197583027842ebe
Score
8/10
Malware Config
Targets
-
- Target Application.bat
- Size 25B
- SHA256 c3b56d68c80c4a6a9879c45a7761a538e3546644623af1ee469d3b70130fa0cd
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target tree.txt
- Size 301KB
- SHA256 a93ac4fb3f9dadc22f7b7f1877bc99b84a77fe3bbe560bdd20bbd7c4b6f9c1d6
Score3/10 -
- Target util.exe
- Size 852KB
- SHA256 d56213d08fb10c880f17e1a262bf1176cf234d1fc591188171e7be9cd856eb12
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.