General
- Target ym2fa3.zip
- Size 5.0MB
- Sample260629-1s3yeshs8n
- SHA256 d5b638b6c419cd942f0707294705a7983d562f9caf75d14dc1618af1537162b1
Score
9/10
Malware Config
Targets
-
- Target ReaLTaiizor.dll
- Size 10.3MB
- SHA256 f467f696b1f9f2c0fea6bca4f9ffda078daf334353868e0ea10cb35b8c9c546a
Score1/10 -
- Target Zenn Tweaks.exe
- Size 907KB
- SHA256 5c926e0f22d06fba4803cb9b9d2a84c269199a5ff9d92a291905c52cafa6ac8e
Score9/10-
Modifies boot configuration data using bcdedit
-
Executes dropped EXE
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
Power Settings
powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.