General
- Target Spirits - Test.zip
- Size 95KB
- Sample260802-17ejdashnd
- SHA256 93d34c3a8e398fc5cc40e695c6267d79c0ea83a15a5cf9e0b7e3bce5d561966d
Malware Config
Targets
-
- Target Spirits - Test/Discord Linking Update/Change.js
- Size 1KB
- SHA256 678ce6160728cc81d526f8afd3b84f5f06e3d0a4a7be5a40dc1c28739ac54a4c
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Spirits - Test/Discord Linking Update/Send Home.js
- Size 1KB
- SHA256 a3dc65c87c6b7e3635e50482f887841b10e4c41c50f072a5ef6fd59424f16c8d
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Spirits - Test/Discord Linking Update/SpiritPart.js
- Size 2KB
- SHA256 96100333c4eccbc7d10fa24f81701d26ade2ea763d004dca18deade692065eae
Score3/10 -
- Target Spirits - Test/Discord Linking Update/Summon.js
- Size 1KB
- SHA256 4cfb0fb87460826bd75ceb36341f7fd8e72d2dc1a5c3f011ea5951a5b34b4486
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Spirits - Test/Discord Linking Update/Toggle.js
- Size 3KB
- SHA256 b19712eb256819519eadd24aba622faca688f6a7461340187770ed38ce6b5ad6
Score3/10 -
- Target Spirits - Test/Discord Linking Update/User ReRoll.js
- Size 3KB
- SHA256 4ea46beecfc856ba8dc54e8bf4065907bd182aa1e3d5062854b98c9b3ffd2aea
Score3/10 -
- Target Spirits - Test/Discord Linking Update/kick.js
- Size 1KB
- SHA256 dff3dcd70b877344b42d04e2c48f7bf0884534377812b26a5e7e249901519391
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Spirits - Test/Discord Linking Update/setupedit.js
- Size 181B
- SHA256 6fc54921e8e22b4337dfb82627ec0c358bd4ae3932809f4fed728aa19ef433d7
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Spirits - Test/Evolution Update/SpiritPart.js
- Size 3KB
- SHA256 c95f5aa1ae2ffc15ca7f4b507ac650554e22e6c8188cff4d98d7041e977046ca
Score3/10 -
- Target Spirits - Test/easystart.bat
- Size 69B
- SHA256 0095b5db3b02bfa5eae1e43a7de3d333add2e96ec7e976166fc7f2b779b7cf1f
Score3/10 -
- Target Spirits - Test/src/commands/Community/botinfo.js
- Size 5KB
- SHA256 03b79e780eb5663e0736cdfd68c3ae556cf8fcfecbd39d441c3625b3708aea10
Score3/10 -
- Target Spirits - Test/src/commands/Community/cats.js
- Size 686B
- SHA256 f21405e26434cc3e65e37c0ad2244537895e1f0bd0abd67860429c6a73868d72
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Spirits - Test/src/commands/Community/joinmessage.js
- Size 1KB
- SHA256 0cd771cdf8ef6bd7b8d7b756a7d843952408ee1af1e3c0dd996002b33d8b39ff
Score3/10 -
- Target Spirits - Test/src/commands/Community/ping.js
- Size 333B
- SHA256 a9cdd3e30f80c996eb6fb446ede40eb9d72555e910b7ea72801cf444b7be9242
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Spirits - Test/src/commands/Community/players.js
- Size 1KB
- SHA256 f5968d9e4ff8de4f3826d0e0779166c70bf31ff02e430cd329238029f55e0da7
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Spirits - Test/src/commands/Community/serverinfo.js
- Size 1KB
- SHA256 10d75947d1c066c0f0602b66d898d63ae1bfc964ccf5684e6dd18ff7fea44916
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Spirits - Test/src/commands/Developer/dev user lookup.js
- Size 1KB
- SHA256 085a24cea40367acedc21d9a00fd1152333c5f41fbfec1b4035e14ecc5cdab7e
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Spirits - Test/src/commands/Developer/devchange.js
- Size 1KB
- SHA256 91ad14ce79b112bc1040e62d2fd61df8e8469dd174d98f11f42c0206ce249166
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Spirits - Test/src/commands/Developer/devinvite.js
- Size 1009B
- SHA256 8df3f6da0ee3643ce7fdc2e2f435a98886fcbd3be71fa13d423e20480e932af9
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Spirits - Test/src/commands/Developer/restart.js
- Size 1KB
- SHA256 bf136c74596034c9aa024566a3e9ab9c74b53ca380f74ca0ebce1826fd2acd13
Score3/10 -
- Target Spirits - Test/src/commands/Developer/serverlookup.js
- Size 2KB
- SHA256 754da6b50832feeccc9ae83fbc8f2921288fb1dafa68538566ec04622d29acb6
Score3/10 -
- Target Spirits - Test/src/commands/Moderation/antikill.js
- Size 1KB
- SHA256 7ae54f65473be975f11490b7e66afbde82b8a43c62f910470b42626ad7a3d420
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Spirits - Test/src/commands/Moderation/clearlag-lis.js
- Size 1KB
- SHA256 1af7e838e60b5ec08b6c606f8b2d5cdadafd9913ceb2943b6d8b329eba75eaab
Score3/10 -
- Target Spirits - Test/src/commands/Moderation/clearlag-remove.js
- Size 1KB
- SHA256 4dbdff13439c8853e5c8905b033d9645c961891bdbb21fc9ab1d0b32fade4770
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Spirits - Test/src/commands/Moderation/clearlag.js
- Size 1KB
- SHA256 e2e39daf1cafd9e06a0cbea4510b9cd6877904826450301da8aed8b918112d17
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Spirits - Test/src/commands/Moderation/clearlagadd.js
- Size 1KB
- SHA256 11ebc63314c5bf87c6d65f731a528256143965cfd583563f450c3f6b6fe7903c
Score3/10 -
- Target Spirits - Test/src/commands/Moderation/cmd.js
- Size 2KB
- SHA256 5b5235874606e96445654c51f41ff5728e557bc3effaee5f2eff7e31fa620c59
Score3/10 -
- Target Spirits - Test/src/commands/Moderation/deathmessage.js
- Size 1KB
- SHA256 a5cab38868d1f886dbda12b5144991acf495ed24562fc9504d780ff23142dbec
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Spirits - Test/src/commands/Moderation/droploot.js
- Size 1KB
- SHA256 5c01894ba9d25fc64ef0a978913e414da8b0d302012f251005489a27eab3a0b2
Score3/10 -
- Target Spirits - Test/src/commands/Moderation/invite.js
- Size 1KB
- SHA256 966a8659bc19691fc53dc9e8c4b1ad937871d6065c70366ee0d08f11d9bb634b
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Spirits - Test/src/commands/Moderation/itemflag.js
- Size 1KB
- SHA256 a793528710f47f0fd9011ff723ac7d406bb520eb58e20a7b64f72fbe401fa899
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Spirits - Test/src/commands/Moderation/itemunflag.js
- Size 1KB
- SHA256 3a1f1f83621c84541a6c1578b37e7815ada994c39e148084b03e7f0392d8c8a3
Score3/10