General
- Target TestClient.zip
- Size 39.1MB
- Sample260905-w7666sfd86
- SHA256 a4ce872385f004be252ed92545fe04b1113786fa235303b8a6f17d04c4fcf5c8
Malware Config
Targets
-
- Target TestClient/Bean Strike_Data/Managed/Assembly-CSharp.dll
- Size 44KB
- SHA256 6c6f7513c851abca1710d0afb32f5a9b8f2ad6b7f96b6cbcf4eee36b9495a742
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target TestClient/Bean Strike_Data/Managed/Unity.RenderPipelines.Core.ShaderLibrary.dll
- Size 3KB
- SHA256 fcfc2f18c3da20ed6084bc2522927e565557a4da4e3baa11728a3bc1f8ba8c07
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target TestClient/Bean Strike_Data/Managed/Unity.RenderPipelines.GPUDriven.Runtime.dll
- Size 268KB
- SHA256 4da88da7572094bc61b2eb8f7bcd206af8f35f39e48f7f716b43fc53a6d50dfc
Score1/10 -
- Target TestClient/Bean Strike_Data/Managed/Unity.RenderPipelines.ShaderGraph.ShaderGraphLibrary.dll
- Size 3KB
- SHA256 a1bea53257865870715756a55bbce5740be432c297364226196ad65a1d3107ca
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target TestClient/Bean Strike_Data/Managed/Unity.RenderPipelines.Universal.2D.Runtime.dll
- Size 209KB
- SHA256 a5eb1b759da960416f038614422c688f6775445b15a49f851fdcf88bdce58caf
Score1/10 -
- Target TestClient/Bean Strike_Data/Managed/Unity.RenderPipelines.Universal.Config.Runtime.dll
- Size 4KB
- SHA256 6b55aa39c259e81116a4905f5228666c2e4414f358204a16156d42384f6ca2f6
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target TestClient/Bean Strike_Data/Managed/Unity.RenderPipelines.Universal.Runtime.dll
- Size 734KB
- SHA256 0cd18113c11560ca49c11701d8e07247fe8e1948bbdc2ef2efa57aef9aaea810
Score1/10 -
- Target TestClient/Bean Strike_Data/Managed/Unity.RenderPipelines.Universal.Shaders.dll
- Size 3KB
- SHA256 0bfb20bac6034b9a867b47c06d1a48406168fdf04b12fd05f873c5b0084f616e
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target TestClient/Bean Strike_Data/Managed/Unity.Scripting.dll
- Size 68KB
- SHA256 a8a97af5c9537c1e04cbd66f3ee2580bb54aa39162a4c573b51a7b6d69c55e37
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target TestClient/Bean Strike_Data/Managed/Unity.SurfaceCache.Runtime.dll
- Size 35KB
- SHA256 e6e3a47e5708504917b9680b09d5902b031470bca4a8832a1c63598daaaccc7f
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target TestClient/Bean Strike_Data/Managed/Unity.TextMeshPro.dll
- Size 428KB
- SHA256 b8a364c4785c24bc361084a66ec58676c7acd5393e5fdbd85ccca3a3e00dda70
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target TestClient/Bean Strike_Data/Managed/Unity.Timeline.dll
- Size 118KB
- SHA256 9bff898ae39d55a225e51c0395d1e35fffe28861e40cf4a02e48227522051151
Score1/10 -
- Target TestClient/Bean Strike_Data/Managed/Unity.UnifiedRayTracing.Runtime.dll
- Size 99KB
- SHA256 d91e3b59515e652120c97b71a7b0c57c1f06b629e0251713b337a5bf0a5b2933
Score1/10 -
- Target TestClient/Bean Strike_Data/Managed/Unity.VisualScripting.Antlr3.Runtime.dll
- Size 84KB
- SHA256 ed7ce205f66eafe39bbb5d084d42e7fe11cb4b386ff208e5d5110891be0b7b37
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target TestClient/Bean Strike_Data/Managed/Unity.VisualScripting.Core.dll
- Size 537KB
- SHA256 1b28b751010ded79a11fde90b311d2087affa9a3721a1fc19e84c6a2dfd320d2
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target TestClient/Bean Strike_Data/Managed/Unity.VisualScripting.DocCodeExamples.dll
- Size 6KB
- SHA256 9391636a81965e47ea6e031556473b1370da3d8195520710ebf7530f4e680a13
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.