General
- Target SaveData.zip
- Size 176KB
- Sample260807-mq22fsfd22
- SHA256 a954eea23ea2398d85f64f5a67357129f7d869dcb23edb9fb3dd51c15f49b4c8
Malware Config
Targets
-
- Target SaveData.zip
- Size 176KB
- SHA256 a954eea23ea2398d85f64f5a67357129f7d869dcb23edb9fb3dd51c15f49b4c8
Score3/10 -
- Target ConstructionsSaveData.json
- Size 1KB
- SHA256 42d7b094d5ac3b29209e3d8fd9931e989471686085f6b6fcac1a1daeecb5a65c
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target CookingSaveManagerSaveData.json
- Size 76B
- SHA256 68dbfc9e1be7918ae1d554a6f9046edebd9beddd44fdf5b0a70ee19cd4c2bc64
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target FiresSaveData.json
- Size 91B
- SHA256 a18e36b5a354ea3192b087e0eb64bc0682c41f8f761a81698a7fe426b9db7fb7
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target FreeFormFreeLinksManagerSaveData.json
- Size 126B
- SHA256 cf3f17cca4785aef9953d8eccdf94e91d82dd2fd7f134efde2afb6b77b23cf2b
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target FreeFormStructureLinkerManagerSaveData.json
- Size 136B
- SHA256 02343939f1a8325615f8cbd67db2dd0f329edda70458e786337d97dd7b50c3b6
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target FreeFormSupportedByScrewFreeLinksSaveData.json
- Size 135B
- SHA256 5e2ae4a0bd2dbe720d94b4f4d7f565ae2904d46eebd502f712408c7eba58a6da
Score3/10 -
- Target FreeFormTreeStructuresSaveData.json
- Size 105B
- SHA256 7034f678aa391312a4565dff8d2be64863fd55a6c54d6f44e79ecdf85495cc28
Score3/10 -
- Target FreeWireConnectorsManagerSaveData.json
- Size 95B
- SHA256 cbd231b6fbb883124e9ab0b0fd566e61a57ee08325fc871a6f712ade43cf6eae
Score3/10 -
- Target FurnitureStorageSaveData.json
- Size 91B
- SHA256 f60eb096e584f1d78df25ff3ccd96ed66163becb1cfca5e13433781a0a44126a
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target GameSetupSaveData.json
- Size 1KB
- SHA256 ea0471c914008c7cc30586c73714e7d1e0a716e077f27335cbad1edf9b7a9d88
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target GameStateSaveData.json
- Size 1KB
- SHA256 f1a99d1e59db79fe8ef3387d16984e4bab646cf87e1e87c6844caa4d3b053035
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target GardenPlotManagerSaveData.json
- Size 76B
- SHA256 234f731cd7e3eae1462bc7945c822f1c059b82e7196b3d77cf7d9991c7277b6a
Score3/10 -
- Target HotkeysSaveData.json
- Size 170B
- SHA256 a41b2cda8826cb2edc10570e30595b1ea0d13e1acc65a59eeb7e412cd1f73870
Score3/10 -
- Target ItemPlatingSaveManagerSaveData.json
- Size 91B
- SHA256 c12d9975fbc7c9a117929065d8c1a8dd6994ede7d31941a6a0f4e3e3e35a1904
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target PlayerArmourSystemSaveData.json
- Size 95B
- SHA256 793694705b2c46a390c173c2410cb8fb40e30a0a7c7fbbb42dc7d7f3296e54fd
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.