General
- Target Microsoft.VisualStudio.Services.VSIXPackage
- Size 9.7MB
- Sample260706-wwantsfs2r
- SHA256 5c206efe8970895a45116d83330e24172dd249ac2f24ecac6aa8b24fdff68f54
Malware Config
Targets
-
- Target extension/dist/src/CompiledCodeContentProvider.js
- Size 4KB
- SHA256 75f011094d305a45665f3075d5b95198307b1cafe7debf2b5302c4228cd7e8ce
Score3/10 -
- Target extension/dist/src/extension.js
- Size 21KB
- SHA256 af1bfb141a30485099f64b2d47c1a7830c9c7da986f29d57f2b866ad921a27b8
Score3/10 -
- Target extension/dist/src/html/autoClose.js
- Size 3KB
- SHA256 00855019c88d5325624ef72feb35f55b96afa08cc45a49287c6bb32b58dbc9e4
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target extension/dist/src/html/htmlEmptyTagsShared.js
- Size 871B
- SHA256 ab8cc04e859a8697ade42dc4935fda95b9b94f2cbaeb8489493ff24a8e08e40c
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target extension/dist/src/sveltekit/generateFiles/commands.js
- Size 772B
- SHA256 fbb4d50871814373aa2d846e5df336e28f1089e5a7bebfd9aad168ccc89c07d1
Score3/10 -
- Target extension/dist/src/sveltekit/generateFiles/generate.js
- Size 1KB
- SHA256 9042bfbb9e74678e10b1f0ba62ae4c2d3a4bcec9d14f6c9ac94eee847a3a4839
Score3/10 -
- Target extension/dist/src/sveltekit/generateFiles/index.js
- Size 5KB
- SHA256 2f1ad7dcf1cc56787f5c0450ed54ed717c61f1f8856d232eb047c3cecf22935d
Score3/10 -
- Target extension/dist/src/sveltekit/generateFiles/resources.js
- Size 2KB
- SHA256 8121eaa166bb30fd77a397b612b60d783694fb8d1723770efcd1b0bc8578695e
Score3/10 -
- Target extension/dist/src/sveltekit/generateFiles/templates/error.js
- Size 1KB
- SHA256 4fb276c1e0514fe90b083fde9aa741d1401816e16413b02b9cc0a3deae5f9e5e
Score3/10 -
- Target extension/dist/src/sveltekit/generateFiles/templates/layout-load.js
- Size 900B
- SHA256 2d327f4f7b4268817c0e615277d2a0bcd35aad34488802786e5cc10359a8f53d
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target extension/dist/src/sveltekit/generateFiles/templates/layout-server.js
- Size 932B
- SHA256 a548a1b9a91e040c1a1e2fb51a9d401361009bd986eb488d5cd6f79a6336174c
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target extension/dist/src/sveltekit/generateFiles/templates/layout.js
- Size 1KB
- SHA256 1a3c7c3b187e7b3b3bf88ed832bfb9a0a12ffd1769978410d561d2cb1bad326c
Score3/10 -
- Target extension/dist/src/sveltekit/generateFiles/templates/page-load.js
- Size 889B
- SHA256 7e06b26ef1b035c960c48f597d5f2fccab9b02987a734a27269f8df4c6eb544b
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target extension/dist/src/sveltekit/generateFiles/templates/page-server.js
- Size 921B
- SHA256 4fe208248bde3fdf0e7049d2bf672092b540d9029e3e1535355270748bccd654
Score3/10 -
- Target extension/dist/src/sveltekit/generateFiles/templates/page.js
- Size 1KB
- SHA256 0053d01348bbb287abb1611065c30fef687b762e08b109aa8bc601b700f5f909
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target extension/dist/src/sveltekit/generateFiles/templates/server.js
- Size 646B
- SHA256 d6d18f4efbd7a219a0c42f9deae5de77391c0ed21e59f346dd6a6a42683ea27e
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.