General
- Target https://ts.bzzhr.to/d/iimft8js66zd?v=jcf_Bws5ne5wLOBWxpswH0hi1JjENP1tXrzLYuL5YOhjhalX_DB11j-oQa7OMaqPppjhZTYe9DQSwppJXDzMWGcWEWQzznWTpW6LpZ4R12h3yemYe3xkYlFyks6nU0FNB76ObmDqgwCO8ujS5ZA4UOm4PF5FKbU94yoydVTttU2rbId895nfPdJh_kE74UJLa-RLVDmK5flm2qf-GOCFHkdfal7LUWlySnYTKcQZtvHBwq5d4ROpuY1NJQxZfpio_A
- Sample260814-ejs6zatzex
Score
8/10
Malware Config
Targets
-
- Target https://ts.bzzhr.to/d/iimft8js66zd?v=jcf_Bws5ne5wLOBWxpswH0hi1JjENP1tXrzLYuL5YOhjhalX_DB11j-oQa7OMaqPppjhZTYe9DQSwppJXDzMWGcWEWQzznWTpW6LpZ4R12h3yemYe3xkYlFyks6nU0FNB76ObmDqgwCO8ujS5ZA4UOm4PF5FKbU94yoydVTttU2rbId895nfPdJh_kE74UJLa-RLVDmK5flm2qf-GOCFHkdfal7LUWlySnYTKcQZtvHBwq5d4ROpuY1NJQxZfpio_A
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.