General
- Target WebComponents.exe
- Size 1.7MB
- Sample260727-ynn8cs1tgv
- SHA256 b6dcb5db080d11a658601dcc975625541110593d4edca60a6f087a3057459ffe
Score
8/10
Malware Config
Targets
-
- Target WebComponents.exe
- Size 1.7MB
- SHA256 b6dcb5db080d11a658601dcc975625541110593d4edca60a6f087a3057459ffe
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Downloads MZ/PE file
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Checks whether UAC is enabled
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.