General
- Target password_df3cb4d8.zip
- Size 7.6MB
- Sample260905-h4arxace56
- SHA256 a1c0804c6b04c6670f8d728af2dd56caf8a97010a2f2591266369d2aecae3a07
Score
8/10
Malware Config
Targets
-
- Target password_df3cb4d8.zip
- Size 7.6MB
- SHA256 a1c0804c6b04c6670f8d728af2dd56caf8a97010a2f2591266369d2aecae3a07
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target df3cb4d8.exe
- Size 10.9MB
- SHA256 1a9fa7e575322ca1562603ae6f7a40c6e48e4e504a78569b9809f40f7a4ba8cf
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of NtSetInformationThreadHideFromDebugger