General
- Target scbaru3.zip
- Size 3.5MB
- Sample260701-pgz7lsdy8k
- SHA256 ccec29e334661ab52a3ea9de92bf76651d01ed459d7372250455b97c396b2772
Score
8/10
Malware Config
Targets
-
- Target system/Gobot/down.php
- Size 24KB
- SHA256 881360ffa9c8e20231194cbb6fddf8626767e1c82188de66243b9bfedc33fb56
Score3/10 -
- Target system/admin.php
- Size 7KB
- SHA256 809a72bf2d46461967f00eb58e5bfcf51cfea0c1439367887dbb875da89bdaad
Score3/10 -
- Target system/api/cc.php
- Size 11KB
- SHA256 0b55c0054f82fd69ee6a56bb16c77f198deb7dbc12c52ba1e4f18adabee50dd3
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target system/assets/form-handler.js
- Size 7KB
- SHA256 5fed4c72135034c5748703f7b7904f4aeb89b33c225b076948b4e65fb62fd2f2
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target system/route.php
- Size 7KB
- SHA256 ad35ac36c60c90e03dbfdfe58902604f931a311d50776622de961560936fed01
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.