General
- Target TabularEditor.2.28.0.zip
- Size 7.1MB
- Sample260701-pfjs8sdx7j
- SHA256 ba85f4653c850b06687e6e0b3c8af3d7c951921ec281deb5df615b2ce43d4ef2
Malware Config
Targets
-
- Target Microsoft.AnalysisServices.Core.dll
- Size 1.3MB
- SHA256 a8bcf7aa23f56cfeb8461e3b7a43f1a0e98ace4b2382f75c70f931764dc9d687
Score1/10 -
- Target Microsoft.AnalysisServices.SPClient.Interfaces.dll
- Size 30KB
- SHA256 375fadebb76f3d9f5871c042dec67af9b8854c887db25c0c615c74f2e151e584
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Microsoft.AnalysisServices.Tabular.Json.dll
- Size 556KB
- SHA256 7eeedc4dc6783c6933854ca0e87d154c72d8d58c25fc569be5d256d6c3f8c49f
Score1/10 -
- Target Microsoft.AnalysisServices.Tabular.dll
- Size 2.1MB
- SHA256 6b5c379440d055dec93c45ad763dda2f5d9f5ce6b7c5a50825abd31e8a1ab046
Score1/10 -
- Target Microsoft.AnalysisServices.dll
- Size 691KB
- SHA256 ca1b8c29c9f34c54e9ce8ac61f8f78e01be7f18a86004581fd7879116a8bee87
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Microsoft.Identity.Client.Broker.dll
- Size 72KB
- SHA256 6af0aa3fea5b7b9cf05d9232b439d589c314b9088e8eeb52450837e405a7d8fe
Score1/10 -
- Target Microsoft.Identity.Client.NativeInterop.dll
- Size 90KB
- SHA256 12be4e9776204d0ff5fca6a8830757ea92a6dbaa1ad6741a2386164342b47ee5
Score1/10 -
- Target Microsoft.Identity.Client.dll
- Size 1.7MB
- SHA256 7011e0fc3061b9e11708db94b1d674c0da7643a6ce731786cae2e49cc649dd4b
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Microsoft.IdentityModel.Abstractions.dll
- Size 19KB
- SHA256 c66caab9056c1d38e2b5a8cef5076913f2d5d5208ce1ce73f588777484b43171
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target System.Buffers.dll
- Size 23KB
- SHA256 2d78d770c9cb997199154ae8c018b9f1d1efbc86729f7264dde6dbad2a12cac3
Score1/10 -
- Target System.Diagnostics.DiagnosticSource.dll
- Size 169KB
- SHA256 5b8ccdda36486950de37484c25e1334376431e52176c32f87dd730690b273e3b
Score1/10 -
- Target System.IO.Compression.dll
- Size 29KB
- SHA256 c251b0f18d96251db2326f67cba338903d04dbae2838dd72f537576e84007d8c
Score1/10 -
- Target System.Memory.dll
- Size 141KB
- SHA256 d5e8e4866f9cfa66f7765660f84b210198893e55335487afe5ebda342c0e913d
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target System.Net.Http.WebRequest.dll
- Size 24KB
- SHA256 9a407e9ffe827aa324a526aa7951ee295ed370dbc624878f22eab320f81f5e6d
Score1/10 -
- Target System.Net.Http.dll
- Size 194KB
- SHA256 c9cd4a7658d83b79c47e335e98bb1fb67900090f4c6aaf25ae141fafc5c9bca4
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target System.Numerics.Vectors.dll
- Size 107KB
- SHA256 20c2fa81b8c70d651099d762954f285fd4f942e63b2d7217c145dab8d4b2f4c9
Score1/10