General
- Target asdasdas.rar
- Size 33.1MB
- Sample260628-d8f29se12j
- SHA256 801c8bb7e61cdf692efb11c1efa77f2ef7d281884ceebf6d5395d4915f6b911b
Malware Config
Targets
-
- Target ComposableAsync.Core.dll
- Size 19KB
- SHA256 d428f7a0729f47c171b5373e8ede4b5646f094b32d4b5bd9e0b9f26a5e3a9d64
Score1/10 -
- Target CoreLibNet.dll
- Size 120KB
- SHA256 a7462fcf65b489aa5c229aacaf5599b52718967f9e62d77f07f725db770ee5b8
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target DnsClient.dll
- Size 163KB
- SHA256 5c468b671a0036ff68782f30c282e8dc9248a42eb7297089a745b4d9997590f6
Score1/10 -
- Target DotNetBungieAPI.Models.dll
- Size 1.7MB
- SHA256 fce8cef0e3a44618a6fe82b2330e4d5c695ade8ebef5a1a2f31b205535406c4a
Score1/10 -
- Target DotNetBungieAPI.Service.Abstractions.dll
- Size 31KB
- SHA256 3d35a742575effeb26d6a400bc0bca85cc1f9f1638d6d6c266d7c09b8c55f281
Score1/10 -
- Target DotNetBungieAPI.dll
- Size 251KB
- SHA256 fb1952f62bf4b166a1e536cf2356080a458518cadb55badaeaf6eaea310ed5b8
Score1/10 -
- Target Hardcodet.NotifyIcon.Wpf.dll
- Size 101KB
- SHA256 2059222c4ae5d0291fce13bd296adcc448d79b6fae27746aedf347608ed3090c
Score1/10 -
- Target MathConverter.dll
- Size 68KB
- SHA256 0ebb64f0e7258a22b0456d0ce1ab9816d7ed582dc99c3a0af5e4dc8f017dcae5
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Microsoft.Bcl.AsyncInterfaces.dll
- Size 14KB
- SHA256 00f26117b0a77b562d5c01038d8b52f8d0b9e18b7c532e16dfae1857a19f2271
Score1/10 -
- Target Microsoft.Data.Sqlite.dll
- Size 165KB
- SHA256 04d0d2926c6c5d1a7d3a3f368edb2be8d4873c81b06fb1f3f11991664510c694
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Microsoft.EntityFrameworkCore.Abstractions.dll
- Size 33KB
- SHA256 cfe1f58e224428ed72b27603032a0c59c7051ab947c50031bdad6bc816477a7f
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Microsoft.EntityFrameworkCore.Relational.dll
- Size 1.7MB
- SHA256 99f31761f7579be9cdb71dc43fbd6867f69631eb79ce4e7eb3315813e686caa3
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Microsoft.EntityFrameworkCore.Sqlite.dll
- Size 199KB
- SHA256 4e5d8943fa9183f905be48dee336ae31228524eb1888eec2d38194566801a7c1
Score1/10 -
- Target Microsoft.EntityFrameworkCore.dll
- Size 2.0MB
- SHA256 923c252f91d6e8e3c01116c39f16e64fb3e85ea70ef7816f6e2c442f71d9e1b0
Score1/10 -
- Target Microsoft.Extensions.Caching.Abstractions.dll
- Size 31KB
- SHA256 c004f78d9f8378c5f79ac3a88e90625a117b9700a75f5f02266289dd4d28e451
Score1/10 -
- Target Microsoft.Extensions.Caching.Memory.dll
- Size 42KB
- SHA256 9ef11f0b594d5be76341ca65a53bf3930aa807c312a278ae22043dcf4db9ce25
Score1/10