General
- Target cracked.zip
- Size 16.5MB
- Sample260809-sf5bqattaw
- SHA256 cf4af9742230d2e28f40812f6fc29aecdd7721080c936c7e027e203efee8fcdc
Malware Config
Targets
-
- Target cracked.zip
- Size 16.5MB
- SHA256 cf4af9742230d2e28f40812f6fc29aecdd7721080c936c7e027e203efee8fcdc
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target cracked/Loader.exe
- Size 298KB
- SHA256 2b61296fafa08458e1e3e3d131b20634fcebbac1be8b71374cb3c03303612638
Score1/10 -
- Target cracked/Madium-Module.dll
- Size 7.8MB
- SHA256 074dd48a356a8f78475cf594a3ff3ea211e42441c19f8a0286d20d7275ac3c4b
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target cracked/Madium.authspoof.exe
- Size 12.0MB
- SHA256 c2bd8149ab84f1faa5d91898c2be384b0c61130580acff8b2e30845fbcaa99a1
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Network Share Discovery
Attempt to gather information on host network.
-
- Target cracked/RUNTHIS.exe
- Size 6KB
- SHA256 0f9de1348ae8631769a4a59ed17aba91e83fdc251af35b8334f5982bdec57e3f
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Network Share Discovery
Attempt to gather information on host network.
-
- Target cracked/lsp/luau-lsp.exe
- Size 16.1MB
- SHA256 9e85ce9370f208c97f1dfc1b8fcf7185fe64386f23130a65fc834f5323a0d653
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.