General
- Target StormUserCGR.exe
- Size 25.7MB
- Sample260703-pvrgmaes7n
- SHA256 1af8c1db7aaf34c6b5b753b58e2eaa9b0e52ed13cfa3559829b09902639c0dce
Malware Config
Targets
-
- Target StormUserCGR.exe
- Size 25.7MB
- SHA256 1af8c1db7aaf34c6b5b753b58e2eaa9b0e52ed13cfa3559829b09902639c0dce
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target $PLUGINSDIR/InstallOptions.dll
- Size 15KB
- SHA256 b2091205e225fc07daf1101218c64ce62a4690cacac9c3d0644d12e93e4c213c
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target GENERALIDADES.pdf
- Size 899KB
- SHA256 b4b06b17257c3ad98d19692631bea1ea704cda0f804f70c0abf592a71581812e
Score3/10 -
- Target Manual STORM User 4.4.5.pdf
- Size 8.0MB
- SHA256 4c0405d5db8a9664517de47fcef88659737f55acf6345610852e3eb3ae092cf5
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
- Target StormUser-4.4.5-RELEASE.jar
- Size 477KB
- SHA256 6679770f5c552fb5cbfeaefc869bfbcc8da33cae99c2f98b6d9408f48cda722c
Score1/10 -
- Target lib/StormUser-4.4.5-RELEASE.jar
- Size 440KB
- SHA256 edca4806b9a5372c213c4ccbc5ee7f4c1418b8bae41b4ddfbaf91d9ebc97817c
Score1/10 -
- Target lib/adminFacades-3.7.2-1604.201512.jar
- Size 93KB
- SHA256 60f6269834992ea43b3588998a0921e2da842b4a44c37e4bddf83d900b4a8feb
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target lib/appframework-1.0.3.jar
- Size 271KB
- SHA256 ca0602ccb30fd2bdc07e8fe09c8dc9b5e8b290a08ccae6e53abe3151a0516cd0
Score1/10 -
- Target lib/baseUser-4.4.5-RELEASE.jar
- Size 461KB
- SHA256 03246f171c167d5f98bd5ad2decb80a261357817bdf7078aabaf166b6371a307
Score1/10 -
- Target lib/commons-codec-1.19.0.jar
- Size 388KB
- SHA256 e4f3849b8bf3da2b1bf565d616bb903da95cc1ce8011f793156077b94479bfcc
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target lib/commons-csv-1.14.1.jar
- Size 64KB
- SHA256 064e095cae7490ec0f7d4d83e6faa243d448e382c6b587694cb9edcaff07dd0d
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target lib/commons-dbutils-1.6.jar
- Size 84KB
- SHA256 ff684d9bf42f9ca5e668cdf53db2226338758ef7bda75f095b7be87421bca859
Score1/10 -
- Target lib/commons-httpclient-3.0.1.jar
- Size 289KB
- SHA256 6e589d7e0b2fb65682229543362e5434f22e6bfbb2986e99a2a7b4eb3918ae95
Score1/10 -
- Target lib/commons-io-2.20.0.jar
- Size 587KB
- SHA256 8d8ed45704d8f02e1df2028776d0d1d88439823d01e5b4bd3dcf2f7895235120
Score1/10 -
- Target lib/commons-lang-2.6.jar
- Size 294KB
- SHA256 7d97c61c579590d4449d81a9dc93aeaf126c4e22d9dfd680744477652fd0aa6e
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.