General
- Target Visualizer_Pathfinding_v3.4-alpha.1.zip
- Size 503KB
- Sample260622-ryznhsds2p
- SHA256 3dbfbc59fa888a1c7c87429bc5ccccbd29f7a1ac4932fc2ddc7d90399836c6e8
Score
8/10
Malware Config
Targets
-
- Target Launch.cmd
- Size 21B
- SHA256 37f60b7923dae8ab38bb72ccfe94bf06c3266202d4881e9d2e0ac28abcd85b25
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target gcc.exe
- Size 636KB
- SHA256 2ea6200c846af534a07338a803acf7f49520abf59b2ae82a701a24e7fada0b97
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target ptd.txt
- Size 301KB
- SHA256 a563a7df740bce2bda1231cebb4ed136813df43361de17c224b97af9941ee0c4
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.