General
- Target Ai.labs1_senecapolytechnic.ca.zip
- Size 4.2MB
- Sample260812-wk44assapc
- SHA256 2de95ae322dd4f623f4b8ba731aeed23654266ba95c58d9c163b9d075bdb6f27
Malware Config
Targets
-
- Target Ai.labs1_senecapolytechnic.ca.zip
- Size 4.2MB
- SHA256 2de95ae322dd4f623f4b8ba731aeed23654266ba95c58d9c163b9d075bdb6f27
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Items.1.001.ai_labs1_senecapolytechnic_ca.zip
- Size 972KB
- SHA256 05a873d06f9a7c025e34d47040e908747fd6cf875e18a639fcc0ed147c1c9689
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Exchange/[email protected]/TeamsMessagesData/Cessna 172 Landing Prompt Guide.html
- Size 132KB
- SHA256 4608a3de5bb07fec7052a7140e2206f25dc922afeb046f36923470418b42813c
Score3/10 -
- Target Exchange/[email protected]/TeamsMessagesData/Daily Briefing Preparation Guide.html
- Size 639KB
- SHA256 904b96025b00bcabcf4ff7f6ffb177957562a954c4dc3dbb686df3443663f2a7
Score3/10 -
- Target Exchange/[email protected]/TeamsMessagesData/Microsoft 365 Chat.html
- Size 8KB
- SHA256 d7a75f72f142bc0e89daf66e854b6aee1c138a5f6039fdfc38e45c52a65680ff
Score3/10 -
- Target Exchange/[email protected]/TeamsMessagesData/Microsoft Copilot.html
- Size 4KB
- SHA256 ef2b592029bdedfe780a3ce4a4e4197c0dbb3153230431922fabe8cde3472435
Score3/10 -
- Target Exchange/[email protected]/TeamsMessagesData/[Looks interesting, thanks,Not intere...html
- Size 185KB
- SHA256 ff34a91244c20931a1d11bb1e44b3b60b27095415d4c699d58d3168c573a03bf
Score3/10 -
- Target PSTs.001.ai_labs1_senecapolytechnic_ca.zip
- Size 3.2MB
- SHA256 905d4b2c32ddc8522406ef32e9c864dc47012e093b279ac83159245ae4739a81
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Exchange/[email protected]
- Size 3.2MB
- SHA256 cda3786db640ab5be42dd91fba03515f47f0708579cf62cf23becf3dea5c7457
Score1/10 -
- Target Reports-Content_Search-ibrahimalalami_outlook_com-StartDirectExport-ai_labs1_senecapolytechnic_ca-2026-08-12_16-39-35.zip
- Size 73KB
- SHA256 2f158835d0cd53957b47d92fb3e24a3848c27dca2908ffbc55faf73af2f21803
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Items_0_2026-08-12_16-39-35.csv
- Size 302KB
- SHA256 2de13c6f0f9121dd9fa6a5624e6dd60ea34b37da6456dfdbf74b4d8545383a07
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Locations-2026-08-12_16-39-35.csv
- Size 373B
- SHA256 e96885386a298c065f9d09836c149225a552eb2602844968e10a08cbce0eca7f
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Settings-2026-08-12_16-39-35.csv
- Size 2KB
- SHA256 2d788b0efbd89452b318ceddb918d2ab908e345f58b819680e391a9b58bfbaf7
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Summary-2026-08-12_16-39-35.csv
- Size 6KB
- SHA256 5aa517c4ce38be073cbd8a4e26921abe464989f65aabde4e33f4e3a06c49a08b
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.