General
- Target ARZ21.zip
- Size 1017KB
- Sample260622-wv3cfse13l
- SHA256 e84a090f20000fa5244f57ff809ff5fb55828e8326472d7735788f8753b6eafb
Score
8/10
Malware Config
Targets
-
- Target Ekag20.EXE
- Size 247KB
- SHA256 23b6b72070a942055680e6447f090643127c27cd3d43b4e0d4ba6acfceab8b88
Score1/10 -
- Target Ekag20nt.exe
- Size 1.9MB
- SHA256 aee2efda9bcf72fb1a9acfdcd7654db73bf7dc1d9afe6d68e312810977002e4a
Score3/10 -
- Target Ekc3220.dll
- Size 191KB
- SHA256 389aaf47d5abe45bf15204bf7473d318f868c5a92dba657abadbd6792ea54ccd
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Ekc6420.dll
- Size 326KB
- SHA256 a93c4fd7cf34d31c0d7e1f79c91b37862e6533682b9373d96406a3b38632a7b7
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.