General
- Target http://chillifarmsukabumi.com
- Sample260819-rhj8wswcle
Score
8/10
Malware Config
Targets
-
- Target http://chillifarmsukabumi.com
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Suspicious clipboard content.
A suspicious script was copied to clipboard.
-
An obfuscated cmd.exe command-line is typically used to evade detection.
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.