General
- Target Deobfuscator.rar
- Size 204KB
- Sample260819-w8brnattbv
- SHA256 15db99952563cde6fe49dea93c16c935580dee7a8e32835335ff4efdb1f2413b
Malware Config
Targets
-
- Target MoonSec V.2,IronBrew,AztupBrew/node_modules/ansi-styles/index.js
- Size 4KB
- SHA256 d3f197d370760ddd8753c1355b4bdb585a787f1baa92bb8ed217f170c138b594
Score3/10 -
- Target MoonSec V.2,IronBrew,AztupBrew/node_modules/chalk/source/index.js
- Size 5KB
- SHA256 a7eda1e88414e0e3f050a09621a35e8d656550077da044606c16b053148f6459
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target MoonSec V.2,IronBrew,AztupBrew/node_modules/chalk/source/templates.js
- Size 3KB
- SHA256 546f8511507d2e842cac590f99dc550dfe2b21f7fdcd12ab071ff5aaa3e770d5
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target MoonSec V.2,IronBrew,AztupBrew/node_modules/chalk/source/util.js
- Size 1KB
- SHA256 9d5cbee8050b580d28fc1de92987ee0237cf609415da8dc781920074f278c016
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target MoonSec V.2,IronBrew,AztupBrew/node_modules/color-convert/README.md
- Size 2KB
- SHA256 8cb35dae3a64e6edf1a680fecb9a850ea866795715aa46e09e211a1ba662d1c2
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target MoonSec V.2,IronBrew,AztupBrew/node_modules/color-convert/conversions.js
- Size 16KB
- SHA256 7225058075157fc78115b8be998a2effdfc1e5b3316b004a130ee5f19303574b
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target MoonSec V.2,IronBrew,AztupBrew/node_modules/color-convert/index.js
- Size 1KB
- SHA256 adb610f9a2fbba92548161871075262496b563dcd0e5e8f5c20f562160a74b34
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target MoonSec V.2,IronBrew,AztupBrew/node_modules/color-convert/route.js
- Size 2KB
- SHA256 5f1420af4a106eaa68ed7b4bb5e46f47e0f251169e38841ec8262447e4691b5d
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target MoonSec V.2,IronBrew,AztupBrew/node_modules/color-name/README.md
- Size 384B
- SHA256 796aef7006b975d2a8a5bad00219c9884e67a51ef96d36b3a0df622e60924c1c
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target MoonSec V.2,IronBrew,AztupBrew/node_modules/color-name/index.js
- Size 4KB
- SHA256 97dabd7ebb70c33c19ccfa6956377fc722d9769924903f42a3bede30d83a8592
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target MoonSec V.2,IronBrew,AztupBrew/node_modules/has-flag/index.js
- Size 330B
- SHA256 e9e921d4734fee9405bef5886c010c80a8f10fe958e5d71bd5d8eed5e616e78d
Score3/10 -
- Target MoonSec V.2,IronBrew,AztupBrew/node_modules/smart-buffer/docs/README_v3.md
- Size 12KB
- SHA256 13d04e06d601538ff297540dbf65f4762cfe89523bab18f488ab9fc08863a9b5
Score3/10 -
- Target MoonSec V.2,IronBrew,AztupBrew/node_modules/supports-color/browser.js
- Size 67B
- SHA256 03b3defae5a0801f91bc78f5f3ff2b13dec13df4cef4c0a94554b2d1183da1d1
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target MoonSec V.2,IronBrew,AztupBrew/node_modules/supports-color/index.js
- Size 2KB
- SHA256 479fd04f71a0fed642baa7e57c7e0701ae6f4a450bde8179f96815e6a26752b0
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target MoonSec V.2,IronBrew,AztupBrew/node_modules/unicode-substring/README.md
- Size 1KB
- SHA256 b18e5dab66002d4daf5c56112cd507b484e37040a3f554a753c6ea6bdd1d9bf1
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target MoonSec V.2,IronBrew,AztupBrew/node_modules/unicode-substring/index.js
- Size 1KB
- SHA256 38d95e351a0d82446da17259553205fdccab5028f23353fdec45f538ef9b9206
Score3/10