General
- Target Process Hollowing Example.rar
- Size 5.7MB
- Sample260707-c31daadt4q
- SHA256 806839caa5522e29a3fd12fb1f0d118500b7f9385e6bf6cf10dccc3f26652860
Score
8/10
Malware Config
Targets
-
- Target Process Hollowing Example/cert.sgn
- Size 5.7MB
- SHA256 99a0a5983e47ed00c4ef4315cf23daee2055fd1a68d05b9818ce86eef497f605
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Process Hollowing Example/main.py
- Size 1KB
- SHA256 87350deaacf1d80e237d6a797cbf714e9242223b1fdce058520d3aa256f3d3b6
Score3/10