General
- Target Tempête.mp3
- Size 5.6MB
- Sample260813-2wfsqszsfv
- SHA256 c341e0e710d23d2f6c84cf77d98b24931aae5eae90441c72a791407a4f37de85
Score
8/10
Malware Config
Targets
-
- Target Tempête.mp3
- Size 5.6MB
- SHA256 c341e0e710d23d2f6c84cf77d98b24931aae5eae90441c72a791407a4f37de85
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Detected potential entity reuse from brand SPOTIFY.
Suspicious use of NtSetInformationThreadHideFromDebugger