General
- Target wetransfer_d5_image-166_20231106_142841-png_2023-11-06_1416.zip.gz
- Size 101.8MB
- Sample260831-ry56aswyht
- SHA256 3dd7d3b7466618f92e989046999f2c77b29cfd5cb26abdee6e1ac73c73ddfb6b
Malware Config
Targets
-
- Target wetransfer_d5_image-166_20231106_142841-png_2023-11-06_1416.zip.gz
- Size 101.8MB
- SHA256 3dd7d3b7466618f92e989046999f2c77b29cfd5cb26abdee6e1ac73c73ddfb6b
Score1/10 -
- Target wetransfer_d5_image-166_20231106_142841-png_2023-11-06_1416.zip
- Size 101.8MB
- SHA256 7996758f722f0b5404c81926327077fe502940f2c36b611de91a864b3b78e191
Score1/10 -
- Target D5_Image 139_20231106_145120.png
- Size 5.0MB
- SHA256 9003f96ef4707857bc72046df34b0ebbf78de556bb60dad29ea0f8f0233b2b52
Score1/10 -
- Target D5_Image 140_20231106_145023.png
- Size 4.6MB
- SHA256 bfa2c8be50bb091b8f504f0b90fa578ee7d72a5db82f86c0e63a9a6126b0abef
Score1/10 -
- Target D5_Image 141_20231106_144931.png
- Size 2.9MB
- SHA256 0b219522d4bc4c5f456873a12aee368d797e7c632bc557c466da0efd007883b4
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target D5_Image 142_20231106_144844.png
- Size 4.5MB
- SHA256 946f6e5c4182f24054da6d422445d6748d9d8dcc918a72cb0e0a9a4c5c09679e
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target D5_Image 143_20231106_144749.png
- Size 4.8MB
- SHA256 9aed2f12a2bb9b43a4a715eea73ceb8ae1efb045bec6404f2ac55d527d9d428c
Score1/10 -
- Target D5_Image 144_20231106_144654.png
- Size 5.1MB
- SHA256 afd868656313c0c553c2ae35b14dd982cfc32fc1bac097d5e5366498a9ab4a8c
Score1/10 -
- Target D5_Image 145_20231106_144558.png
- Size 5.4MB
- SHA256 009b0af21f27b6bb772fcf59b66f2e19a47e0b0eadd066047a83bf604f6b29de
Score1/10 -
- Target D5_Image 146_20231106_144503.png
- Size 4.8MB
- SHA256 8f3873a7bb03e9d482bfbd8413a0ff5f3eb3ad19878b69b5f88d57d9a944e596
Score1/10 -
- Target D5_Image 147_20231106_144409.png
- Size 3.6MB
- SHA256 5eeffba1886d0d9b49fa810aa71ca0cc11ea2c3a41bc5bdcd61382000823b5f8
Score1/10 -
- Target D5_Image 148_20231106_144316.png
- Size 3.4MB
- SHA256 101cba083dd7ba43e03a80adaef07f043bb0e03c31c53dacaa6f93bd1fddae5a
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target D5_Image 149_20231106_144224.png
- Size 5.4MB
- SHA256 58b115dcd0c5cbd37b748a4178d4bdd54a1fe42b7c245c36c2006d7a979f4cd7
Score1/10 -
- Target D5_Image 150_20231106_144129.png
- Size 3.5MB
- SHA256 6d4ca440cf93fc5dca906fa38ec1e156e490ae784f91473d9564d2b937219835
Score1/10 -
- Target D5_Image 151_20231106_144037.png
- Size 3.0MB
- SHA256 1a537027417cd3819f0dc624ac4608c605c444102fa828c3ce4b2f946a178eb4
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target D5_Image 152_20231106_143944.png
- Size 4.8MB
- SHA256 78d0fa4cb45301e5fb07b68cf4b86d7b0f2a37c876359ffed3600792fe5bd2da
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target D5_Image 153_20231106_143851.png
- Size 3.6MB
- SHA256 bbc1798983dbeadcd24811d1bc9f9625ac13f345c76f0ed4a5b56f159888d2c0
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target D5_Image 154_20231106_143806.png
- Size 3.7MB
- SHA256 83bdd0ec6964ec6873a831af14458b4d9c7e1f6d774113be7b3c96ecac0f4190
Score1/10 -
- Target D5_Image 155_20231106_143717.png
- Size 4.1MB
- SHA256 3588ad6c3721e6116c32254ae57b80ef9623c0e78d1b5001ac672f9bef5b7a57
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target D5_Image 156_20231106_143623.png
- Size 4.7MB
- SHA256 3952c444ff3e5bbbf17ae1e79846c8aea9a1654c2e52b2d0213b53231d24fed4
Score1/10 -
- Target D5_Image 157_20231106_143534.png
- Size 4.5MB
- SHA256 e928721a724e7e8bc97d875e95c8ad40b56564ad5a6d834c79b453b240414d33
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target D5_Image 158_20231106_143442.png
- Size 2.7MB
- SHA256 24cf6d5409df734bbf2b590543e5353fff77915169a5381c6d45a1a96d3ecb01
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target D5_Image 159_20231106_143358.png
- Size 1.5MB
- SHA256 8b0f13430ffac082a9abb0be8c190560beb6d7bf8052afc017917523fb6cb404
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target D5_Image 160_20231106_143318.png
- Size 3.8MB
- SHA256 bfbaf44ff75da9e3a51b7c657f1f26cce24703c962ab1c54a7b22a3baf17348c
Score1/10 -
- Target D5_Image 161_20231106_143231.png
- Size 2.5MB
- SHA256 eed8c86058ab3de8a2ac7794df1951133f2ca4c49a84e81d73e08d404e0a0f7e
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target D5_Image 162_20231106_143145.png
- Size 2.8MB
- SHA256 a6d0f1d82f0433314209647d9d5902dd5829ce893dfb87689c4cfd666e6e7f15
Score1/10 -
- Target D5_Image 163_20231106_143100.png
- Size 1.2MB
- SHA256 9a6390f4eb95e32b07a04c7cfc0e7875ca566dd206a34161b471f044bb3dd3d3
Score1/10 -
- Target D5_Image 164_20231106_143021.png
- Size 3.3MB
- SHA256 598030ae2087ad7e1b3589cc3b34e7b6712dfa721641094c95d61a58a28ba9ac
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target D5_Image 165_20231106_142930.png
- Size 2.1MB
- SHA256 efb4a97ad3b354173f1e7b52f8481619db6a8b244d3a12d287d8481ff0079932
Score1/10 -
- Target D5_Image 166_20231106_142841.png
- Size 3.5MB
- SHA256 a84e22db8f3938f13d43cdf8f16dc45fa04ed04a7245ddae7e12470fb33d0dde
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.