General
- Target Software-v3.7.zip
- Size 513KB
- Sample260622-ryzzaads3l
- SHA256 4f4594982705081539aa8f7d44c9ea4d82051938cf10508ff6c6f2c882be4634
Score
8/10
Malware Config
Targets
-
- Target LaunchTool.cmd
- Size 30B
- SHA256 0476281e2ed8cca25b881092334c2aa7bca82c4be9819fcb9cefe8027e532f1e
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target lib_bit.txt
- Size 289KB
- SHA256 ead242a036f033f0829afa33768814be168ae29431d9de479e63a80c4cf9f431
Score3/10 -
- Target lua51.dll
- Size 477KB
- SHA256 ef224f48255771d28b15169d60c8b0a925875dba15b3bd245c0b34d77290120d
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target vm_s390x.exe
- Size 286KB
- SHA256 1f546f1b4b2cd404fdd2ba9b52223ecf935ad26588993f703bef69db4c94034e
Score1/10