General
- Target niggainmybutthole.zip
- Size 24.2MB
- Sample260702-avmfcaav4z
- SHA256 49dce1e441129f44034eb94143df788c874da685cb8f3c6bbfbbf471531dd840
Score
8/10
Malware Config
Targets
-
- Target Aurora/Aurora/AuroraClient.runtimeconfig.json
- Size 443B
- SHA256 7e79af92820e50910b90f1cade2728f45987393f24b50e384dc225d9773b7194
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.