General
- Target NFA_switcher.exe
- Size 35.6MB
- Sample260626-lejv3aaz2j
- SHA256 b26a315eb53bc585c433c2efb1dd6be23457d9aa221c90ada8045a0df9e39614
Score
10/10
Malware Config
Targets
-
- Target NFA_switcher.exe
- Size 35.6MB
- SHA256 b26a315eb53bc585c433c2efb1dd6be23457d9aa221c90ada8045a0df9e39614
Score10/10-
Detects DarkSideRAT
-
Family: DarkSideRAT
DarkSideRAT is a remote access trojan.
-
Executes dropped EXE
-
- Target steam_switcher.pyc
- Size 16B
- SHA256 e86a83a9a9986c0e1b710b9b73bad5e68b37a9197b07de686372c3e31e6dd57e
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.