General
- Target MfW10_Fix_Repair_GDK_V7_Generic.rar
- Size 8.4MB
- Sample260625-x3ef2aew8y
- SHA256 63b02058cf7e6b0db7d414232eec8f3ec2cdae9c0e10ba116d8f52ed6a8ad4a3
Score
8/10
Malware Config
Targets
-
- Target OnlineFix.ini
- Size 323B
- SHA256 94da15b9c28e3650b03e69122850eee260177513b04122cc3722a0f990e1a0e8
Score1/10 -
- Target OnlineFix.url
- Size 46B
- SHA256 3cb526cccccc54af4c006fff00d1f48f830d08cdd4a2f21213856065666ef38e
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target OnlineFix64.dll
- Size 10.3MB
- SHA256 52cb3902999034e01bae63c6a06612d1798b0e0addc1bd4ce7680891b0229953
Score1/10 -
- Target dlllist.txt
- Size 15B
- SHA256 fc0befb4aae4b7f0eeb1c398fccea03cc795590e09db6628974520091fcfc516
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target winmm.dll
- Size 494KB
- SHA256 cb8baaa2054a11628b96e474e1428a430c95321f8ac3b89764255cbd6628a9d6
Score1/10