General
- Target https://36c51f88f69aacf2a3d437fafbfb7448.r2.cloudflarestorage.com/m=%20y-files/OTBank_Payment_doc__28_07_2026_573731.rar?X-Amz-Algorithm=3DAWS4-= HMAC-SHA256&X-Amz-Credential=3D3684c73e168ac2d137232734a6af2459%2F2026072= 8%2Fauto%2Fs3%2Faws4_request&X-Amz-Date=3D20260728T064843Z&X-Amz-Expires=3D= 604798&X-Amz-SignedHeaders=3Dhost&X-Amz-Signature=3D44092194ba42c6abbfb08= a58114f5d83e4a2b6f98268ab1a7ba1f4ababef2172
- Sample260728-lax7wsgd48
Score
8/10
Malware Config
Targets
-
- Target https://36c51f88f69aacf2a3d437fafbfb7448.r2.cloudflarestorage.com/m=%20y-files/OTBank_Payment_doc__28_07_2026_573731.rar?X-Amz-Algorithm=3DAWS4-= HMAC-SHA256&X-Amz-Credential=3D3684c73e168ac2d137232734a6af2459%2F2026072= 8%2Fauto%2Fs3%2Faws4_request&X-Amz-Date=3D20260728T064843Z&X-Amz-Expires=3D= 604798&X-Amz-SignedHeaders=3Dhost&X-Amz-Signature=3D44092194ba42c6abbfb08= a58114f5d83e4a2b6f98268ab1a7ba1f4ababef2172
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.