General
- Target Osiris-cs2-release.zip
- Size 117KB
- Sample260706-kf42yscx31
- SHA256 216e033e847f228457c4233e78df0764101061edee5e8b245f3e01dea4b2b2ca
Malware Config
Targets
-
- Target Osiris-cs2-release.zip
- Size 117KB
- SHA256 216e033e847f228457c4233e78df0764101061edee5e8b245f3e01dea4b2b2ca
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target Osiris-cs2-release/Source/UI/Panorama/PanoramaCommandDispatcher.h
- Size 1KB
- SHA256 6fd3fed4e2408d7566ceaf6aa8b2fa05ccafd22349869517f8e91a87f09c43ee
Score3/10 -
- Target Osiris-cs2-release/Source/UI/Panorama/PanoramaGUI.h
- Size 2KB
- SHA256 12650187dd1d733e84ad084d6d3eafb4655d32b0403297cfe4e2b13af607b26d
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Osiris-cs2-release/Source/UI/Panorama/SetCommandHandler.h
- Size 1KB
- SHA256 90884df8e1833bf2c2aaff8f1d5509b2c8c800a244670c4c455649db20fd70a1
Score3/10 -
- Target Osiris-cs2-release/Source/Utils/Align.h
- Size 784B
- SHA256 ca356649e0e963b979925f118d95b12fedac1a268cc2ecbb65df57441c3eefff
Score3/10 -
- Target Osiris-cs2-release/Source/Utils/CharUtils.h
- Size 178B
- SHA256 62dfa7a990cfcb1a00e2709dd33a42ddf06add18f614b1a8da72482e3d511cd6
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Osiris-cs2-release/Source/Utils/FieldOffset.h
- Size 1KB
- SHA256 1fff1444d153aaeceec338cc0e68de44a7886712bedbda7ec7d8559b34025a19
Score3/10 -
- Target Osiris-cs2-release/Source/Utils/FlagsBuilder.h
- Size 703B
- SHA256 868b047b84a9d9091e910e9089d0b16677b8143b570bbab7a4d67fae898a9b8b
Score3/10 -
- Target Osiris-cs2-release/Source/Utils/GenericFunctionPointer.h
- Size 755B
- SHA256 8bc6835f4d3e763720d327a52f51b3d507a4805dc3c045db2f9d99043cfef019
Score3/10 -
- Target Osiris-cs2-release/Source/Utils/HexChars.h
- Size 858B
- SHA256 c81a51ab8e7c93ccac5c6bed7bd0c3bdfbb5e3b24fe010176c941803a6731779
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Osiris-cs2-release/Source/Utils/ManuallyDestructible.h
- Size 1KB
- SHA256 d7daa90559bbbd1efb9e71cc7f819c4127d74c8e5ad5fb44d9de30e146484706
Score3/10 -
- Target Osiris-cs2-release/Source/Utils/MemorySection.h
- Size 846B
- SHA256 292b1ca178b2276dc891a53c1b563399920a94a135e8f368d4e8b073c45d4dc3
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Osiris-cs2-release/Source/Utils/Pad.h
- Size 150B
- SHA256 8c1bba4af06a49157751195a7163804ff24b75b4e49676e1a18c1af02acf6125
Score3/10 -
- Target Osiris-cs2-release/Source/Utils/RefCountedHook.h
- Size 1007B
- SHA256 cfd5fb944e10e2100dc6eac76e80480b0b946527a2d6ff7902db0a052d5199ba
Score3/10 -
- Target Osiris-cs2-release/Source/Utils/ReturnAddress.h
- Size 257B
- SHA256 7b234db05ff7243347275eec67ca86962e47d7ce91d8f8b47f20642854266291
Score3/10 -
- Target Osiris-cs2-release/Source/Utils/SafeAddress.h
- Size 1KB
- SHA256 ac854a03e5e38979bb90c2d2cae327a0b8b1def96957e9ffc1650467130d6a09
Score3/10 -
- Target Osiris-cs2-release/Source/Utils/SpanSlice.h
- Size 924B
- SHA256 eab7aff1edec4d4211628f4edc949d59c4a509059d4062efac6ea28f3c69ecbe
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Osiris-cs2-release/Source/Utils/StringBuilder.h
- Size 2KB
- SHA256 4102f43123110fd958bd36eee4c89502bf605375bd9d5154f662a4d7561685e8
Score3/10 -
- Target Osiris-cs2-release/Source/Utils/StringParser.h
- Size 2KB
- SHA256 75bdd130e3ef5e74dec38a1a61f750befdc458369d88fa044d427d4ce2cbd7cc
Score3/10 -
- Target Osiris-cs2-release/Source/Verification/Verifier.h
- Size 2KB
- SHA256 05f47393cca6299d9e0a2d1b2e8a51771be02179e3c147ac8e77f9e855c47b0c
Score3/10 -
- Target Osiris-cs2-release/Source/Verification/VerifyMacros.h
- Size 1020B
- SHA256 216fb7ec05a631f680de21647fdfcaa8c714f7f921abd9a32e841556ba184d4f
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Osiris-cs2-release/Source/Vmt/VmtCopy.h
- Size 1KB
- SHA256 4d2405a1fa96fbdd09683f141eb16e81b87defdb7b7bf8d0d1282198ad19ded3
Score3/10 -
- Target Osiris-cs2-release/Source/Vmt/VmtLength.h
- Size 73B
- SHA256 e919e2c75beca36874176c9ed81f37e9ea6db62e32d689654d4f659249bfca5a
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Osiris-cs2-release/Source/Vmt/VmtLengthCalculator.h
- Size 808B
- SHA256 945cf43bb72787a2466d45e41de3b8027ed8f356c104f392cd71c5f9557c8f12
Score3/10 -
- Target Osiris-cs2-release/Source/Vmt/VmtSwapper.h
- Size 1KB
- SHA256 7029ff7c775d8eefa7b92f3637b136e5b71cf9333a14193e710e2022fc5956d5
Score3/10 -
- Target Osiris-cs2-release/Source/dllmain.cpp
- Size 2KB
- SHA256 e595859ce83d2d649744bea6bbdf8a5315f5c541e277e9140b558cee87789108
Score3/10 -
- Target Osiris-cs2-release/Tests/CMakeLists.txt
- Size 695B
- SHA256 d9c6859d30645e5db2e41fdcfb15f09d7ce684e6cf84373dfa5f54564d089d18
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Osiris-cs2-release/Tests/HelpersTests/BitsTests.cpp
- Size 713B
- SHA256 a346300da8b1c21d69648b59cb2a4b4ee60d00e51b53a57b8a7182bbedfe4949
Score3/10 -
- Target Osiris-cs2-release/Tests/HelpersTests/CMakeLists.txt
- Size 47B
- SHA256 a07e6db2b5c2f6f5d0daeb81aea5faa3fdf94c97c7719884d20a21d0332dfafc
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Osiris-cs2-release/Tests/MemoryAllocation/CMakeLists.txt
- Size 57B
- SHA256 a8798306db153f32a3b76756d781bf339f2094d26d1b820ab8e3f0dd66233229
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Osiris-cs2-release/Tests/MemoryAllocation/MockMemoryAllocator.cpp
- Size 838B
- SHA256 cdda37ca88fb2d6d233217a3a789db96fbc3ac5ac207c0de8f4e8fd4171f1927
Score3/10 -
- Target Osiris-cs2-release/Tests/UtilsTests/PatternFinderTests.cpp
- Size 1KB
- SHA256 cc4066e1ec3c082b834994b96357335ebc16c3dab8ae37ac8282be6e450d75db
Score3/10