General
- Target shitty phantom.zip
- Size 7KB
- Sample260701-asgr3sbt7l
- SHA256 ed360dfe17465a2cb0fd3876af8d6693c94ef32fe27d7cf687d01bdb8ee24536
Score
8/10
Malware Config
Targets
-
- Target shitty phantom.zip
- Size 7KB
- SHA256 ed360dfe17465a2cb0fd3876af8d6693c94ef32fe27d7cf687d01bdb8ee24536
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Untitled-1.html
- Size 19KB
- SHA256 053a34ed9200d80747aba5a32bd734433b0aaf3125beac74f28bba0ddb31b1da
Score4/10 -
- Target css1.css
- Size 12KB
- SHA256 778f61d5cd0bc646a80d4a33e191657697b5fc4e5a65887026770c9a70fa65d2
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target css2.css
- Size 217B
- SHA256 61c071f3f806d99d9040fb7887fddbb0604510d2e1d5700c338cbe44d44e2d0e
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.