General
- Target Mega_Hack_Installer_Setup.exe
- Size 40.2MB
- Sample260706-31n6caay2j
- SHA256 8ce5796f81ded11eabb005f4cf717d160be89eeb8699da020ee74c0b67f02901
Malware Config
Targets
-
- Target Mega_Hack_Installer_Setup.exe
- Size 40.2MB
- SHA256 8ce5796f81ded11eabb005f4cf717d160be89eeb8699da020ee74c0b67f02901
Score4/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target $TEMP/VC_redist.x64.exe
- Size 17.7MB
- SHA256 8995548dfffcde7c49987029c764355612ba6850ee09a7b6f0fddc85bdc5c280
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target D3Dcompiler_47.dll
- Size 4.0MB
- SHA256 e994847e01a6f1e4cbdc5a864616ac262f67ee4f14db194984661a8d927ab7f4
Score1/10 -
- Target Qt5Core.dll
- Size 5.7MB
- SHA256 8d2ff4ce9096ddccc4f4cd62c2e41fc854cfd1b0d6e8d296645a7f5fd4ae565a
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Qt5Gui.dll
- Size 6.7MB
- SHA256 5e7d2d41b8b92a880e83b8cc0ca173f5da61218604186196787ee1600956be1e
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Qt5Network.dll
- Size 1.3MB
- SHA256 4ef341ae9302e793878020f0740b09b0f31cb380408a697f75c69fdbd20fc7a1
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Qt5Svg.dll
- Size 322KB
- SHA256 7348cfc6444438b8845fb3f59381227325d40ca2187d463e82fc7b8e93e38db5
Score1/10 -
- Target Qt5Widgets.dll
- Size 5.2MB
- SHA256 3788c669d4b645e5a576de9fc77fca776bf516d43c89143dc2ca28291ba14358
Score1/10 -
- Target bearer/qgenericbearer.dll
- Size 51KB
- SHA256 0534cef5f54eb6d10b2e90bd6089dc413c555771e12220be9a5cc48adddc803d
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target iconengines/qsvgicon.dll
- Size 40KB
- SHA256 42dde60befcf1d9f96b8366a9988626b97d7d0d829ebea32f756d6ecd9ea99a8
Score1/10 -
- Target imageformats/qgif.dll
- Size 38KB
- SHA256 36174dd4c5f37c5f065c7a26e0ac65c4c3a41fdc0416882af856a23a5d03bb9d
Score1/10 -
- Target imageformats/qicns.dll
- Size 43KB
- SHA256 f4a229a082d16f80016f366156a2b951550f1e9df6d4177323bbedd92a429909
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target imageformats/qico.dll
- Size 37KB
- SHA256 1982a635db9652304131c9c6ff9a693e70241600d2ef22b354962aa37997de0b
Score1/10 -
- Target imageformats/qjpeg.dll
- Size 411KB
- SHA256 fb4e980cb5fafa8a4cd4239329aed93f7c32ed939c94b61fb2df657f3c6ad158
Score1/10