General
- Target Preset Pilot_4.0.8_x64-setup.exe
- Size 8.9MB
- Sample260702-we3chsgt3j
- SHA256 509599faca85aa018a3e652c8ce9faba5b42e782ded184884d63a7ed5f9d3e9a
Malware Config
Targets
-
- Target Preset Pilot_4.0.8_x64-setup.exe
- Size 8.9MB
- SHA256 509599faca85aa018a3e652c8ce9faba5b42e782ded184884d63a7ed5f9d3e9a
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Network Share Discovery
Attempt to gather information on host network.
-
- Target $PLUGINSDIR/NSISdl.dll
- Size 15KB
- SHA256 ddf40229dd9d6b268902d8dea88c8a04aacf1af218dd29f6dcd35babc54ac08d
Score3/10 -
- Target $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 fe330320459637d8dd2b5d84d07925c38ec264152ffd3b1760a4d44d76536caa
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target $PLUGINSDIR/nsis_tauri_utils.dll
- Size 33KB
- SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
Score3/10 -
- Target WebView2Loader.dll
- Size 156KB
- SHA256 8427b1fc58ec707813e5c0a51eb5d69397bb333250a7b891be4d3b123f1e0f1c
Score1/10 -
- Target premiere-extension/ext.js
- Size 76KB
- SHA256 8e964a0f18e1c304c501598f5b4b899740f405a1e8e713e4a97b63ebdae271be
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target premiere-extension/index.html
- Size 1KB
- SHA256 db1184d61835ec8502a2dde0abfcedf6846af239cfc17f935dbc652dcd2ec8b1
Score4/10 -
- Target premiere-extension/jsx/bootstrap.jsx
- Size 1KB
- SHA256 1bf672129dba1799daa7714df8dae3288ba164b262bd0843889f0f1085554dea
Score3/10 -
- Target premiere-extension/lib/CSInterface.js
- Size 41KB
- SHA256 0416e8dd0050296fac0b44e40ad02c266e280739bac1fbbca8e298b64de06853
Score3/10 -
- Target premiere-sequence-importer-extension/ext.js
- Size 224KB
- SHA256 54bea4aa079353ee6db62f8bb64db3af2ff2c7e451b9d457df7a89d397ea8880
Score3/10 -
- Target premiere-sequence-importer-extension/index.html
- Size 1KB
- SHA256 693b8c5654d45b441ed36bce7c2269253077aa8ced089f66fecc41d50e4f7db4
Score4/10 -
- Target premiere-sequence-importer-extension/jsx/bootstrap.jsx
- Size 1KB
- SHA256 1bf672129dba1799daa7714df8dae3288ba164b262bd0843889f0f1085554dea
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target premiere-sequence-importer-extension/lib/CSInterface.js
- Size 41KB
- SHA256 0416e8dd0050296fac0b44e40ad02c266e280739bac1fbbca8e298b64de06853
Score3/10 -
- Target index.html
- Size 108B
- SHA256 ebdc1f113dc0d33ed83f0e8d045737d9273196829127ec7fa60f15363acb83a0
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target index.js
- Size 2.9MB
- SHA256 638cc4a7622fe555a2b6a2f11ca43d9b99e2339226af67830e313e289f5deca5
Score3/10