General
- Target linkchamado.7z
- Size 1.1MB
- Sample260709-akeyhsbx9s
- SHA256 be42cffe0734ef854f0386132e51b20a74c963d982e6cb2f0496cb5de30ddea1
Malware Config
Targets
-
- Target linkchamado/api/chamado_detail.php
- Size 3KB
- SHA256 1e51294c5e7d33c54510f0dd359ca540a904d762db56d4068dfad3677b0703f9
Score3/10 -
- Target linkchamado/api/chamado_detail3333333.php
- Size 9KB
- SHA256 931700680811b5f8c4b9e443324e7151b1b08e3ab6e5ef7e05c5e6689853aed2
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target linkchamado/api/chamado_detail_atual.php
- Size 9KB
- SHA256 f8b9db984f447d25d7242e181c904cbedbf8ac11bddace2f4af857a3645c9173
Score3/10 -
- Target linkchamado/api/chamado_detail_bckup.php
- Size 3KB
- SHA256 b33cd2ae46f866786cbf00fc9f6cf7c50f6443cc3dbf4c3dc569a732661a7eb3
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target linkchamado/api/chamado_detailfase3.php
- Size 9KB
- SHA256 f108c28cab59544adbc9e6acefd84b6b801e1355719ee072bf6f45ace7bf73ab
Score3/10 -
- Target linkchamado/api/chamado_update.php
- Size 12KB
- SHA256 ef7c06f8ebdd9d481147756b343c3491dd988fdf7dc0cbc95e8243dd196398a7
Score3/10 -
- Target linkchamado/api/chamado_update000000.php
- Size 14KB
- SHA256 8162ca98029e1f95f1de4e31812c1c1e93d4b723f0339afecedf4509efd130de
Score3/10 -
- Target linkchamado/api/chamado_update11.php
- Size 14KB
- SHA256 06d4400ef3077a23a73738916b28224689dab6f978178c5dcbb4c3f451e318df
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target linkchamado/api/config.php
- Size 947B
- SHA256 a94b9f7c31fcb3b7c8fb9e28c2f935e5dc5ee0ae174bd27916c1392dc826a646
Score3/10 -
- Target linkchamado/api/criar_chamado.php
- Size 4KB
- SHA256 f5383cbe41f87aec82e4c226b765bd587acacfc788ce5fb3f50d85f4bb5655b0
Score3/10 -
- Target linkchamado/api/login.php
- Size 3KB
- SHA256 935caa5d7d1c16f57cb499fce76738d1ffe0db8f617566adf2f8fcebb15db709
Score3/10 -
- Target linkchamado/api/login_app.php
- Size 1KB
- SHA256 17dabf6c174a7cb5419b9d9f2d25ec2d9351676c2409d74349f3a66af5c67b4b
Score3/10 -
- Target linkchamado/api/logout.php
- Size 587B
- SHA256 3a16c8671db035ccd8ca3eef1506de88b9ab35160381776a77337d926d9ae14f
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target linkchamado/api/os_impressao.php
- Size 10KB
- SHA256 6812cdf88308ab3c2d0f92f2e765222e37a1192f638543bfacab903e3d756e88
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target linkchamado/api/salvar_assinatura.php
- Size 3KB
- SHA256 7ea00848546cabef971e3fad2483f851cf0c2d1533010b69054214b22673b772
Score3/10 -
- Target linkchamado/api/upload/chamado_update.php
- Size 7KB
- SHA256 6ab887b255aa912e9eea9f4659880fe5f81d88cd7d802029439a585685929037
Score3/10