General
- Target SM-4.5.zip
- Size 6.3MB
- Sample260709-agtx9sbx3s
- SHA256 abbdf715153936fde3b9b4ce3d14af9505740ef0febdfdaf263f5b1e2d814724
Malware Config
Targets
-
- Target api/ads/autoads_11.php
- Size 8KB
- SHA256 a8240bf6f1bb4a3d08d86407772e0d1b20b6931aaaebca53fe5df77e5c45e31b
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target api/api.php
- Size 11KB
- SHA256 18c5e303e7725a86814028760aab39cf4375a943ba4e9ee2d0ba3899707dae81
Score3/10 -
- Target api/discover.php
- Size 2KB
- SHA256 f55b392710e31f732282ac76ea311805a2d39ef212e023f0c7546b38de1a65d7
Score3/10 -
- Target api/leagues.php
- Size 8KB
- SHA256 34e0d5773f7f94e023d602cd21c19327fe9654e8af3249d37b7d35e6c3dfb59f
Score3/10 -
- Target api/sport_l_table.php
- Size 4KB
- SHA256 d0d295d9727fe5edd9348a3a601ef495d3b4258bfcf24daa13bde95e369bee1d
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target api/sport_l_table_single.php
- Size 4KB
- SHA256 b0bb86a4402cc88bfa4298ee0eb061d80b78eecfc5fe80d1d5f35aaef4b64e68
Score3/10 -
- Target api/text/text_05.php
- Size 3KB
- SHA256 e913429bf3e2afd1cb1a05edcc2d3731274f5865d771f9bf0cfac21fde19d4ab
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target download/index.php
- Size 7KB
- SHA256 d459f9944e2f372d4e7b07635c4046f39d34f06dd0f8982d83c99c9137fb8cb7
Score4/10 -
- Target general_settings.php
- Size 14KB
- SHA256 7765d768e866003929d8a29c878fd3c26838a18e9cb9177e7ffd0507126c0894
Score3/10 -
- Target includes/footer.php
- Size 2KB
- SHA256 a1a98f8b803ff57acb2472b6f90e38bc31a03b5b3133c3c1843c4d4348e5d78e
Score3/10 -
- Target includes/functions.php
- Size 10KB
- SHA256 eb175ce012a1a4aed0c93753538e44bf25dc2a2e21e0295d9fae9a020ab9ff4c
Score3/10 -
- Target includes/json_utils.php
- Size 1KB
- SHA256 657dbe4fdf2682dde5a7dfa07fc34c0a8cbad96271e42f958d18f06318c1ab0a
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target js/alerts.js
- Size 1KB
- SHA256 4c80f97b605334d4d7920dad1c5e92890fd32656bc52aab811d3fc836043116b
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target js/custom.js
- Size 262B
- SHA256 355f39a7977e8353dcf285320c6873ab1c7d9f32f82c6487872417d08c1f7736
Score3/10 -
- Target js/three.min.js
- Size 601KB
- SHA256 74782bdbcf6518f7745ed77035968fcae95ed4ab5c9a0f90cf646a69c20785ec
Score3/10 -
- Target js/vanta.net.min.js
- Size 12KB
- SHA256 76fe5829c73c27aa4f357200997c160523277c0ddb81f35d5cfb818cc3cb96c6
Score3/10