General
- Target 2dfe43ff6350dd137934a1af2f028d457ca4f79aa1060a4b03fe25c78e291412
- Size 9.9MB
- Sample260707-l6vrmscw3k
- SHA256 2dfe43ff6350dd137934a1af2f028d457ca4f79aa1060a4b03fe25c78e291412
Malware Config
Targets
-
- Target 寒假班课程重点和注意事项/寒假班课程重点和注意事项/__init__/11.docx
- Size 9KB
- SHA256 569494edb5c8a39d74ecfce74294e0e50b731a5240e20592939ce523aabc6c48
Score1/10 -
- Target 寒假班课程重点和注意事项/寒假班课程重点和注意事项/__init__/Crypto/Cipher/AES.py
- Size 9KB
- SHA256 076aa8b82c133fe19bac3ada6d451cae2e0503a6db34b4a00247992de8dd4a97
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target 寒假班课程重点和注意事项/寒假班课程重点和注意事项/__init__/Crypto/Cipher/ARC2.py
- Size 7KB
- SHA256 cf808c3951f83d9e86799e02a564661d6c372216656dc5d40fd9e19b21d84a53
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target 寒假班课程重点和注意事项/寒假班课程重点和注意事项/__init__/Crypto/Cipher/ARC4.py
- Size 5KB
- SHA256 8e7c7189986eaad85a5cc29bf9fea819e5eb144a449bdcfee66a5d6fa9738909
Score3/10 -
- Target 寒假班课程重点和注意事项/寒假班课程重点和注意事项/__init__/Crypto/Cipher/Blowfish.py
- Size 5KB
- SHA256 9e71714f41ad4fc6499b83ff0199d1ff75d73d551a740cffdc077d13ad930edf
Score3/10 -
- Target 寒假班课程重点和注意事项/寒假班课程重点和注意事项/__init__/Crypto/Cipher/CAST.py
- Size 6KB
- SHA256 2e59e547baf132e8553fc76e9ae2151b48c0610483e54130b0b6262a03f95903
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target 寒假班课程重点和注意事项/寒假班课程重点和注意事项/__init__/Crypto/Cipher/ChaCha20.py
- Size 10KB
- SHA256 068ae8765df74153e0d75fe40e422618d9fe4a5016faac5d60d1663abd225b82
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target 寒假班课程重点和注意事项/寒假班课程重点和注意事项/__init__/Crypto/Cipher/ChaCha20_Poly1305.py
- Size 11KB
- SHA256 f9ac5471b762339307b3e64e2d3b0e5f0822842053b3cd7327dfb9fe2b6f57ac
Score3/10 -
- Target 寒假班课程重点和注意事项/寒假班课程重点和注意事项/__init__/Crypto/Cipher/DES.py
- Size 5KB
- SHA256 bae52d7a7d2cd509d466156dc2878d7e4194bb304a8cb555f353ec00108c9186
Score3/10 -
- Target 寒假班课程重点和注意事项/寒假班课程重点和注意事项/__init__/Crypto/Cipher/DES3.py
- Size 6KB
- SHA256 70d9b525599d85146924ef8dbdf0980c42a03f4fbb2d01a2cadbf7ed2d43cd93
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target 寒假班课程重点和注意事项/寒假班课程重点和注意事项/__init__/Crypto/Cipher/PKCS1_OAEP.py
- Size 8KB
- SHA256 b197948eacd76b02a5bf42fdd009a0a51a19fe0bcc571c9e6a98bbbaf1ad12cc
Score3/10 -
- Target 寒假班课程重点和注意事项/寒假班课程重点和注意事项/__init__/Crypto/Cipher/PKCS1_v1_5.py
- Size 8KB
- SHA256 b5779f84428c9ad5116dfd46ac1fba2c9df9f3f93dc3d955ec0ece8db8565f78
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target 寒假班课程重点和注意事项/寒假班课程重点和注意事项/__init__/Crypto/Cipher/Salsa20.py
- Size 6KB
- SHA256 80a7769de32a81b8fb8cbe362066ff80711d630c0beb39235246e4fd53e11870
Score3/10 -
- Target 寒假班课程重点和注意事项/寒假班课程重点和注意事项/__init__/Crypto/Cipher/_ARC4.pyd
- Size 21KB
- SHA256 4347b2ab52af042670bd9dc2ac2f15b2487980e92e523da0641b8287d8816ce6
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target 寒假班课程重点和注意事项/寒假班课程重点和注意事项/__init__/Crypto/Cipher/_EKSBlowfish.py
- Size 5KB
- SHA256 26b7450998b5e04410a77486c695457c58dcbc8db24f50cc685651d223f3be8e
Score3/10 -
- Target 寒假班课程重点和注意事项/寒假班课程重点和注意事项/__init__/Crypto/Cipher/_Salsa20.pyd
- Size 24KB
- SHA256 433310a5fdc3df5f19f905237751156001c69d7805789d6178c6acbb31e90105
Score1/10