General
- Target 0x21.zip
- Size 146.1MB
- Sample260820-rcs9lsdm2x
- SHA256 0cddbe1186d0b5520cd40e676364b896ba4a3d00ba35cdd73d1e31fb2dce94be
Score
8/10
Malware Config
Targets
-
- Target 0x/Sjtweaks cracked by tank230/39xu9wRFs2w8oOrnfWcb5qKr6Fd/SJTweaks Premium.exe
- Size 201.1MB
- SHA256 237764875bc2442caa30d343e11f97c1c553a7356aad25f6ea9fc8f25a195297
Score8/10-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Reads ssh keys stored on the system
Tries to access SSH used by SSH programs.
-
Hide Artifacts: Hidden Window
Windows that would typically be displayed when an application carries out an operation can be hidden.
-
- Target 0x/Sjtweaks cracked by tank230/39xu9wRFs2w8oOrnfWcb5qKr6Fd/resources/elevate.exe
- Size 105KB
- SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
Score3/10
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1