General
- Target DiscordPromoGEN.rar
- Size 19.5MB
- Sample260803-rbs78a1flc
- SHA256 ae388db7fa0266c5f1599707d528bade74543fcd0a1e646aa28cd0a2d28888e9
Malware Config
Targets
-
- Target DiscordPromoGEN.rar
- Size 19.5MB
- SHA256 ae388db7fa0266c5f1599707d528bade74543fcd0a1e646aa28cd0a2d28888e9
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target DiscordPromoGEN/discordpromo_gen.exe
- Size 19.9MB
- SHA256 b040d0e5af026dba21e51b6e4135fdd93f6e8c3b5443fe8d18381723a6858965
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target main.pyc
- Size 10KB
- SHA256 21386192ee16441b3db37b60ef4b386c5484726e965dab559fd95ce298e43f16
Score3/10 -
- Target DiscordPromoGEN/readme.md
- Size 195B
- SHA256 8ab115e09367bab24ecdb38ee79f93ab1f3e25371aaa501135275135ef6b7b5d
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target promo check/__pycache__/console.cpython-311.pyc
- Size 8KB
- SHA256 5e819f77047222ba85e3c20504ee7a0bea60c526841141ba20517f1ada30d04e
Score3/10 -
- Target promo check/__pycache__/console.cpython-312.pyc
- Size 8KB
- SHA256 8a793b4696d7b8beb375e3abf9e45a71dd6117eb15b5c76bb92d725ba29c428c
Score3/10 -
- Target promo check/__pycache__/kopeechka.cpython-311.pyc
- Size 2KB
- SHA256 973b1f46eb341f3581d0143f31ff0f7ff6346795dab0cbf9ea5199a4d7dac450
Score3/10 -
- Target promo check/__pycache__/kopeechka.cpython-312.pyc
- Size 2KB
- SHA256 f35a489cbaa612940d3ea83cefcad39cd3696b991e4f3c7378985689af49fa47
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target promo check/__pycache__/puller.cpython-311.pyc
- Size 2KB
- SHA256 2dc0e38781f115ad9daef3afdb5d4dacba9422eb2803b9f843a25329b81e8dc0
Score3/10 -
- Target promo check/__pycache__/puller.cpython-312.pyc
- Size 1KB
- SHA256 789cae892ce01ebed873e5e5897d999942f43eefe88086dddbd911ad152d0eb4
Score3/10 -
- Target promo check/__pycache__/solver.cpython-311.pyc
- Size 2KB
- SHA256 6b338ea296263df717dad4bcafa8da5521767c6e0d8211e48c1b70213816a3dd
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target promo check/__pycache__/solver.cpython-312.pyc
- Size 1KB
- SHA256 7c6bf0e0f7b3301cf7151e10491a83d77cfe91f22100d6b00a465161a9b1dbf3
Score3/10 -
- Target promo check/config.json
- Size 50B
- SHA256 b6115d39dc2ad4aca8a497adef5ad612d70159d43bace9415875e73b5ff77d9a
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target promo check/main.py
- Size 9KB
- SHA256 e4ba942c2456246f2877f2b3f94a412a34c79e9921b1fab1006b6d418d389315
Score3/10 -
- Target promo check/start.bat
- Size 22B
- SHA256 083007780946ce12a8a8f128f2944df193b55ae21316c1062728d5d9de2532d8
Score3/10