General
- Target YASB.GUI_0.0.7_wbnnev551gwxy.msixbundle
- Size 58.2MB
- Sample260702-ndfhcse15p
- SHA256 256865bfc6d3d66ad6bc792262d37c7d7fa1b0a2f11979f85f45d7bfaf58f1e0
Malware Config
Targets
-
- Target YASB.GUI_0.0.7_aarch64.msix
- Size 33.8MB
- SHA256 56c6bedf5e8c5dcafaab7c5f61b768d7af5554f2e676acbbb48806b2438fcd04
Score1/10 -
- Target concrt140.dll
- Size 705KB
- SHA256 599bc7eaec13274536cc3ec2d18e810e79bc9eb915237b4ee6d25081b6926214
Score1/10 -
- Target lib/Microsoft.WindowsAppRuntime.Bootstrap.dll
- Size 379KB
- SHA256 23a10d098557eda0565907ab78160b81e483964b5adc10705de155370d54dab0
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target lib/_socket.pyd
- Size 84KB
- SHA256 fe12895837ffd6c5c7af1fb4c8f24d391008541126f4ebea0a5e176b9f238db3
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target lib/core/application.pyc
- Size 44KB
- SHA256 c39e0f7188cd645c2ca95c07dd9e5f1cb219b4114962180605cad751a401edc4
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target lib/core/code_editor.pyc
- Size 23KB
- SHA256 8effea2f41abcdaf884330f0d4cfa8fe746652ea7856a0f90f717267ac0d1b2a
Score3/10 -
- Target lib/core/config_manager.pyc
- Size 21KB
- SHA256 00bd18d7e2ef7c93bd413b7da3ee3e12bdc490eaacb5b72eea81101e1b1c204e
Score3/10 -
- Target lib/core/constants.pyc
- Size 2KB
- SHA256 358592adcf8ac64575c889c5b0292dba1b2cc89995d63d826932ebc298c3c932
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target lib/core/editor/code_editor.html
- Size 21KB
- SHA256 9e06410126ecb2b28fbd9a7bb5c3512083184a331f554a13a79988a4fb3e219d
Score4/10 -
- Target lib/core/editor/editor_context_menu.py
- Size 4KB
- SHA256 aaba8000ca126554802c23caa3b869ed7f3c91388a59d7334082da8b6991cf1c
Score3/10 -
- Target lib/core/editor/editor_context_menu.pyc
- Size 7KB
- SHA256 5679548251ddd9337520a02854a48a492d555c74f011db17a91d1821cb019853
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target lib/core/editor/monaco/vs/_commonjsHelpers-CT9FvmAN.js
- Size 209B
- SHA256 a8f49b8d0a1e943e17cf66d9fd353eaaded24d1c29d3b27d30513301d7e85893
Score3/10 -
- Target lib/core/editor/monaco/vs/assets/css.worker-HnVq6Ewq.js
- Size 1005KB
- SHA256 d82d939dc53b0dbb109f144d5430cd4f4699521774133f6ff7ae61a529d9e81b
Score3/10 -
- Target lib/core/editor/monaco/vs/assets/editor.worker-Be8ye1pW.js
- Size 245KB
- SHA256 fe7bf6cff0d19b0ca25c6b0394438038e581ce143e57f400a709e2d7a303bcf1
Score3/10 -
- Target lib/core/editor/monaco/vs/basic-languages/monaco.contribution.js
- Size 14KB
- SHA256 9f384b13f98f2688214c5a8f58ce2608e7b9180e01fc62d827a89cf8f2d67df7
Score3/10 -
- Target lib/core/editor/monaco/vs/css-CaeNmE3S.js
- Size 4KB
- SHA256 6139f56e2b53802902383acb9e228b12b9cf77f6817b0069dc5dd66f4031cf71
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.