General
- Target main.zip
- Size 2.0MB
- Sample260804-xd26ssck4y
- SHA256 1e4395a599e0082c5c435d78dfe53c403fa59d21c9fe4b83ad7d5320ccfa7fd0
Score
8/10
Malware Config
Targets
-
- Target main/amdgpio3.sys
- Size 32KB
- SHA256 0422d184e8bdae44fd1daefc6e712fcad06295bbdc8d80565806c27e95be3e51
Score7/10-
Creates new service(s)
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target main/main.exe
- Size 2.7MB
- SHA256 b6aadf55a7940a4758171df31999294b5f55860afa883a41c7a0cec9297d68f3
Score8/10-
Downloads MZ/PE file
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
1Service Execution
1