General
- Target https://darkforums.ru/Thread-Selling-South-Korea-DATABASE-DUMPS-Namyang-Industrial-Co-Ltd-nynexmo-com-nyi-co-kr?highlight=%5BSouth+Korea%5D+DATABASE+DUMPS+-+Namyang+Industrial+Co.%2C+Ltd.+%28nynexmo.com%2C+nyi.co.kr%29
- Sample260805-fev1faycph
Score
8/10
Malware Config
Targets
-
- Target https://darkforums.ru/Thread-Selling-South-Korea-DATABASE-DUMPS-Namyang-Industrial-Co-Ltd-nynexmo-com-nyi-co-kr?highlight=%5BSouth+Korea%5D+DATABASE+DUMPS+-+Namyang+Industrial+Co.%2C+Ltd.+%28nynexmo.com%2C+nyi.co.kr%29
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.