General
- Target clumsy-x86-64-Release.zip
- Size 624KB
- Sample260707-ejznraev7m
- SHA256 83d61715fd5893b4f0ec7e2c46d5e714e57439a0ca9c9ebe0e93e7d6ab473c0d
Score
8/10
Malware Config
Targets
-
- Target WinDivert.dll
- Size 46KB
- SHA256 6110bfa44667405179c3e15e12af1b62037e447ed59b054b19042032995e6c7e
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target WinDivert64.sys
- Size 88KB
- SHA256 5c3e7bbb06ebb134bed7b1231fdf3139a2052cbe5e8c8418e54237933b51bb4e
Score1/10 -
- Target clumsy.exe
- Size 1.0MB
- SHA256 20319ee11d9f9c71e4b887c6d221114d9892a76e44ecc5ae6f42ff4adf770b70
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.