General
- Target Guard-Spec-2.0.zip
- Size 573KB
- Sample260622-rzb9lsds8j
- SHA256 ef72586f7fcb20d847d904a2eb060ba12f4939202afd7de99d0831437a5901e0
Score
8/10
Malware Config
Targets
-
- Target Application.cmd
- Size 31B
- SHA256 af6f59bd3caee5daa2d6765dd8c1bc167060a9681617ee1e2aff32f1eda3477c
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target luajit.exe
- Size 857KB
- SHA256 3595a6b226ce4daa0a28edea152b3a887c01f6323db1d082f6568c995cdefb55
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target static.txt
- Size 301KB
- SHA256 59c2115caf3104184de6cbc64c4029886b7302e1fa58acc910a2c567222e8616
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.