General
- Target NexusMods.zip
- Size 102.4MB
- Sample260708-h3sw4act9w
- SHA256 e6fb6580bbb830ed4e231c630fb37c35dc5b168337434971b9117621dd5d6641
Malware Config
Targets
-
- Target NexusMods.zip
- Size 102.4MB
- SHA256 e6fb6580bbb830ed4e231c630fb37c35dc5b168337434971b9117621dd5d6641
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target NexusMods/ReadMe.txt
- Size 282B
- SHA256 4f86ce4e5f6a24f04ef509da0b5c7d1a9892b0722bd71a2eba78bc30512054f7
Score1/10 -
- Target NexusMods/data/data_100.bin
- Size 733KB
- SHA256 8f75ce06d9f5ea8a52a00868a952a5a198b4d43417a0088adb2d375b9b88f9eb
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target NexusMods/data/info_22.data
- Size 747KB
- SHA256 054c91e5a5b5a4def81c4e8e37cc5c7e57e57bd7f603f13763e092792fb69c47
Score3/10 -
- Target NexusMods/data/info_80.000
- Size 525KB
- SHA256 7cd0479a2e08ec218509c54bd6fdf2f5b46e8369d9e36d17a5a0cd4b131b0ac2
Score3/10 -
- Target NexusMods/data/input_93.001
- Size 1002KB
- SHA256 8d3c9135cc1ab438b2a0667474635dbf4697d099451259b1baa0c82c88392dc2
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target NexusMods/data/lib_13.dll
- Size 803KB
- SHA256 9640a67cae70a7f22ef8b233bbe7957631a192b1519361f4f09fa2193eed9074
Score1/10 -
- Target NexusMods/data/log_101.sdata
- Size 822KB
- SHA256 0f9873af22dc32672b90050befe1028aad2f48cf7fa6afb1eee768e9eb4dfa6f
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target NexusMods/data/log_102.dll
- Size 721KB
- SHA256 49dc4ae0876e5a5491700a67f181b83c2cd6ab63a42509548534057032343459
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target NexusMods/data/log_30.dat
- Size 918KB
- SHA256 c878377e14bcecdf03d09b332fffcaae05a2660d7512b70b795f591a363d423c
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target NexusMods/data/log_37.dlm
- Size 689KB
- SHA256 216fffce9c21c81b5865fe64873a9d698bf2a3f302913780e595fae15086c2a6
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target NexusMods/data/log_51.dlm
- Size 594KB
- SHA256 3209ce6fecd9575c1ec63f44e1f3f860f183dee17b346abf70f4184ca6eedd82
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target NexusMods/data/main_106.bin
- Size 681KB
- SHA256 eb26336b4612040265fa0456013dbe5153b368e9608c8208cf829d6ea5a81303
Score3/10 -
- Target NexusMods/data/main_21.002
- Size 1.0MB
- SHA256 3b5f2bea915dcab1d6557eb2fe8b132823f9f104d7a3da3b2968b5e166318bce
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target NexusMods/data/main_28.sdata
- Size 987KB
- SHA256 5912561984fd1f3432ccb37e82606e3deb6826061f570569c03d0fbf429fa9e0
Score3/10 -
- Target NexusMods/data/main_53.sdat
- Size 1.0MB
- SHA256 c16a6320a0df44d862528f9b423bb40d9779e12f18e069738f8b14a5d443db96
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.