General
- Target viewbot.zip
- Size 5.1MB
- Sample260820-e227lasvfy
- SHA256 1c66b554580de9455258bd42b77a668eb8dfd6ab0bf2f39f218e68a0c997035c
Score
8/10
Malware Config
Targets
-
- Target viewbot.zip
- Size 5.1MB
- SHA256 1c66b554580de9455258bd42b77a668eb8dfd6ab0bf2f39f218e68a0c997035c
Score1/10 -
- Target viewbot/0x21 viewbot.exe
- Size 9.5MB
- SHA256 056411a3ef1c584491bca1cc670b0218a91b1312676f2931f8d10532141cfdcd
Score6/10-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
- Target viewbot/go.mod
- Size 218B
- SHA256 946ff61e139546b0e1eda8a74e70fec67a99e8f8f60a71a9035d4b5f4ab5b303
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target viewbot/go.sum
- Size 749B
- SHA256 9fa3153cdd79953a93a22f76b0e78d2ce282cba952487b15e72f52461d5c8863
Score3/10 -
- Target viewbot/main.go
- Size 25KB
- SHA256 a3b8c6131f36578a57c7bb59b696eeff6ec7bb9c4c0bfe7b89c102cc32747409
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2JavaScript
1Windows Command Shell
1