General
- Target photoshop 7.0.iso
- Size 161.9MB
- Sample260625-vb7bmadx9j
- SHA256 705e630d9c63919d199f7618a484f64c88af9212e4b1ab4b80707d411a9f0fd3
Malware Config
Targets
-
- Target photoshop 7.0.iso
- Size 161.9MB
- SHA256 705e630d9c63919d199f7618a484f64c88af9212e4b1ab4b80707d411a9f0fd3
Score3/10 -
- Target out.iso
- Size 161.9MB
- SHA256 705e630d9c63919d199f7618a484f64c88af9212e4b1ab4b80707d411a9f0fd3
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target AUTORUN.INF
- Size 29B
- SHA256 fd685847d75549aff3af71526e2641d02fae790b348df421d5378d967a5660f3
Score1/10 -
- Target Abcpy.ini
- Size 5KB
- SHA256 9a2905d76f4ba0a921f96911da6146c6f7582a9a69166698105b222aa70aab2e
Score1/10 -
- Target DATA.TAG
- Size 101B
- SHA256 701a7f972aa0157e9bac02054df4fad7bad7766bb05b2551516796adf8e5fb22
Score3/10 -
- Target Photoshop 7.0 ReadMe.wri
- Size 12KB
- SHA256 4db56a5bd18499866b1eb44ad87ea81b6925c86a075ca94e570257085e172d38
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target SETUP.INI
- Size 250B
- SHA256 857ef7b67fd1675d1f28ec77d4ddf0ef73129b188fd44cf25e0e212ad285919e
Score1/10 -
- Target Setup.bmp
- Size 507KB
- SHA256 0a9b9eb97ee06c3934049af3580db136812ded0608564e5bec4f1c6e30adda45
Score1/10 -
- Target Setup.exe
- Size 72KB
- SHA256 5656e87da0641c9dcfcd0ee8949ce72b3fa6a7d0e8b1fd985a16f6bd6c34ce52
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target _INST32I.EX_
- Size 289KB
- SHA256 b2ff4e8402a5160c491b1ac7eba0073fbbe2220dce107441461b250544eff35a
Score3/10 -
- Target _ISDel.exe
- Size 27KB
- SHA256 b5dc0feb738a91ce3cfa982647fe2779787335c6c2c598d5b49818565d7c3e84
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target _Setup.dll
- Size 34KB
- SHA256 1ad637e80a25f6f885604589056814d16ccad55699be14920e2b99f2d74c1019
Score3/10 -
- Target _sys1.cab
- Size 171KB
- SHA256 cfd46ab6971db11a5d35dfac4dd1e9c717eac8df85815b13eacc8060e87f7447
Score1/10 -
- Target _sys1.hdr
- Size 6KB
- SHA256 a6a945c678976ed14e2c6df4c1cc21a4a274f9f21d3e83a73ab0e2d26577b7e4
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target _user1.cab
- Size 2.8MB
- SHA256 ecb87a730abafd7d154368c1865b40616af9a5471c8a903b951fa565166f7d7c
Score1/10 -
- Target _user1.hdr
- Size 9KB
- SHA256 3041b7b91b18610d38e9c245c275e78d906deb360fac694d093698fbdb1ed0fe
Score3/10