General
- Target pc_scanner.exe
- Size 15.3MB
- Sample260824-v3regsec87
- SHA256 691dc0c50cee6b32dc04a6d3ef6d27e162fafa9e15de95f1c6ff2506dee74414
Score
8/10
Malware Config
Targets
-
- Target pc_scanner.exe
- Size 15.3MB
- SHA256 691dc0c50cee6b32dc04a6d3ef6d27e162fafa9e15de95f1c6ff2506dee74414
Score8/10Command and Scripting Interpreter: PowerShell
Run Powershell to get system information as a root user.
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
Loads dropped DLL
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
Power Settings
powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.