General
- Target bin.zip
- Size 35.5MB
- Sample260822-l11eyatalc
- SHA256 bc0ebb78cfe3e78fc4ef0ca493f34f2242e87239a13d7408d018c957a1679c6c
Score
7/10
Malware Config
Targets
-
- Target bin/Decompiler.exe
- Size 2.5MB
- SHA256 0ae066344b869c2e443aea77cf52063e02ed060f1867e54279b9616420a8fc3a
Score1/10 -
- Target bin/Potassium (1).exe
- Size 23.9MB
- SHA256 d4a06aed70cfddaf747e6d2564bed581d4686d854d4771b199ef1ec6c7b3dfbd
Score6/10-
Checks whether UAC is enabled
-
Network Share Discovery
Attempt to gather information on host network.
-
- Target bin/Potassium.dll
- Size 9.6MB
- SHA256 1332b6db4fea221ed0bf093fbcd2dcd54cab8f97f0909b2cafc0b797240d767b
Score1/10 -
- Target bin/Potassium.exe
- Size 13.9MB
- SHA256 a152fd006bcf346ac8c5c3d2f90e1a324372bafd28b6af0df702e478da44cc85
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target bin/Potassium_patched4.exe
- Size 23.9MB
- SHA256 03d160ece6da0e9f1e1e867a75a01f91ae5768ea62e1c10368fe31dc0236f6ad
Score7/10-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Network Share Discovery
Attempt to gather information on host network.