General
- Target fc719973568be54650e96c1ed127cf36c8b6c8e4f3e7864e4098a2ec2ac1a9a4
- Size 1.8MB
- Sample260709-hwcljaex8w
- SHA256 fc719973568be54650e96c1ed127cf36c8b6c8e4f3e7864e4098a2ec2ac1a9a4
Score
8/10
Malware Config
Targets
-
- Target fc719973568be54650e96c1ed127cf36c8b6c8e4f3e7864e4098a2ec2ac1a9a4
- Size 1.8MB
- SHA256 fc719973568be54650e96c1ed127cf36c8b6c8e4f3e7864e4098a2ec2ac1a9a4
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
VMProtect packed file
Detects executables packed with VMProtect commercial packer.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.