General
- Target Docs- www.whiteheadgroup.co.nz.zip
- Size 6.2MB
- Sample260818-se8mravbjb
- SHA256 e955780c7a63bb3d9dadc386bd6f0cbad79f63c00315e8c7bdf09392d9eca3fe
Score
8/10
Malware Config
Targets
-
- Target New folder/a. Scan docs 1 to 5.pdf
- Size 1.6MB
- SHA256 9c062728309efccf55bcfc598284fbb9c3ac46e033307b9158b965e41e04c863
Score3/10 -
- Target New folder/b. Scan Docs 6 - 14.pdf
- Size 2.0MB
- SHA256 0a6956cd4149fd8e2bb6e1d7f743d24be4ed325506496dc1b31f2accad4200d4
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target New folder/c. Scan docs 15 - 18.pdf
- Size 2.5MB
- SHA256 36a44f4d75dac24b6dd8b3708c88960e8f5b53de7ec4a36068074676ceac1e31
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target New folder/d. Scan Docs 18 -21.pdf
- Size 1.0MB
- SHA256 6b35ca57080eac324141d8ab9c9c4819c2ffbbcb664121b5f97c97c79de28811
Score3/10 -
- Target New folder/e. Scan Docs 18 -21 Computer Force.pdf
- Size 385KB
- SHA256 6e7d069ebae142cd4c68dcda704915e95301901be2212d13d3acbe970ee95824
Score3/10