General
- Target w.exe
- Size 10.0MB
- Sample260823-nrgycaab26
- SHA256 bda37b122adebba9b64e3b02eccf023fe832c3741bc64d59660245ff10992c11
Score
9/10
Malware Config
Targets
-
- Target w.exe
- Size 10.0MB
- SHA256 bda37b122adebba9b64e3b02eccf023fe832c3741bc64d59660245ff10992c11
Score9/10-
Clears Windows event logs
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
-
- Target ByGoneSpoofer.pyc
- Size 103KB
- SHA256 d704cdfd06329863edaeffcf4038e815890040b13e441b9e987f6ac3c35db091
Score3/10