General
- Target i640.cab
- Size 31.3MB
- Sample260701-aqdmmsbs8p
- SHA256 55271ed0c745a80bce683ca57fb27608016010a71e847ecf3cf30dea857df920
Malware Config
Targets
-
- Target ApiClient.dll
- Size 131KB
- SHA256 72f4614196570969975123af1dd2e2c7a28726342edded20c6ea11d592ad6eca
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target ApiClient_arm64.dll
- Size 316KB
- SHA256 816a4dacca2172c7f267ef67b12ee5c8515c0613e27175abfd84bdebc7623904
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target AppVCatalog.dll
- Size 511KB
- SHA256 26da69d6ece289a73e3e9a1659d201d10fee1160ca04bcd6ec174fc68665aaf8
Score1/10 -
- Target AppVFileSystemMetadata.dll
- Size 247KB
- SHA256 5b28a8458d805865ff1a8c47eced122f4f9341474bf284ef02494d34c76e29c5
Score1/10 -
- Target AppVIntegration.dll
- Size 1.5MB
- SHA256 005be5975a82b238a0208b0b777478b24a334c076583e61f56aa7ba52a9ea840
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target AppVIsvApi.dll
- Size 360KB
- SHA256 4b2af96928e174ed97031c3859b16e879ca54c3972b10ffcb6048e3d31ac55bd
Score1/10 -
- Target AppVIsvStreamingManager.dll
- Size 181KB
- SHA256 91dccc2e5f92f8c70747c41617d1f4f3953ce2ca2cb3861dbb27001be116878a
Score1/10 -
- Target AppVIsvSubsystemController.dll
- Size 909KB
- SHA256 5da89a3c8c14c63f318bb836a1fbebe4d89fc225c31c8884ef982cbe42070088
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target AppVIsvVirtualization.dll
- Size 462KB
- SHA256 18beb1ccc4fef771ab6c8b0b2ab8f808bf9099a75993d7c60f82296472f5df92
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target AppVManifest.dll
- Size 858KB
- SHA256 26b092d6651bf7df19ef13fdc8b6f4edc23f716f44da9b306315b00e68e8a4bb
Score1/10 -
- Target AppVOrchestration.dll
- Size 740KB
- SHA256 0c2eb6902b9b45a5b9426dd047b7ee8c66359b456286d411ba0360fa74458c9f
Score1/10 -
- Target AppVPolicy.dll
- Size 944KB
- SHA256 67616e4012d8c6471d98f6da1e41854ccf2d7795c27e3c0234dff5fdbe235ae3
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target AppVScripting.dll
- Size 364KB
- SHA256 de15828fbba0ba640dc393bd49cb1afa90c40ace0224c912d629268801bcd968
Score1/10 -
- Target AppVShNotify.exe
- Size 218KB
- SHA256 4f18c152852ca08bec2584e049ce76639cb14e38087a5537dbe31dc64f5e891e
Score1/10 -
- Target AppvIsvSubsystems32.dll
- Size 1.0MB
- SHA256 10fe48686fdb3d5d144bae3bfe8e2a39508812e116b2802d3afa6af0709b7ed0
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target AppvIsvSubsystems64.dll
- Size 1.4MB
- SHA256 5216fc0458fe9ed5c84aa6dfed853428c2fbc53ee1d472e031a72a8ad28f23b1
Score1/10