General
- Target Unbranded_Perm.zip
- Size 31.3MB
- Sample260709-m85kasat5t
- SHA256 e37abf8c8597eb2c1eaace8fcf50bdc6cf77b4fb5c83fcad4627804885615ad1
Score
8/10
Malware Config
Targets
-
- Target Unbranded_Perm.zip
- Size 31.3MB
- SHA256 e37abf8c8597eb2c1eaace8fcf50bdc6cf77b4fb5c83fcad4627804885615ad1
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target README.txt
- Size 545B
- SHA256 ab53d5a2ae3cd0e541586f2645f360da9956b8173e542eec9ddcd96b60c26c84
Score1/10 -
- Target Unbranded_Perm.exe
- Size 31.0MB
- SHA256 0177661c8f4ce40e34dd0f8272b0c4f9d96601d0b1544f2fa73a4f8c234f67a9
Score3/10 -
- Target freetype.dll
- Size 672KB
- SHA256 cabb749f16cf301ae2d33876fe14c7df219c574e4d3628c5ce0dcf2bc83a965d
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target fullpatch1.1337
- Size 5KB
- SHA256 61f8b4e567824fe1787fd26a8cc8942d393e854578822fdd0e28a743f973d243
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.