General
- Target replay_mimic_cpp.zip
- Size 2.7MB
- Sample260908-krdddaweph
- SHA256 d0a99784c092df9b24713864b2b926f3f6d46da4e43c8569b1106e7c462eb0b4
Malware Config
Targets
-
- Target replay_mimic_cpp/build.ps1
- Size 1KB
- SHA256 6abadc3af9ce084ef6efcf6e519bd49e9b9f64463571ad882a49fdf095e97fdf
Score3/10 -
- Target replay_mimic_cpp/find_dl_url.py
- Size 2KB
- SHA256 7c47c1f8c1beaf341304f68348be0a2e22a4d6a9aeb707f3d46b562a4a8c9515
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target replay_mimic_cpp/inspect_score_page.py
- Size 2KB
- SHA256 8fc66b0718b1dd18869973a1b63749f7608e798c56a665a8ee9ce9931f6b8a37
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target replay_mimic_cpp/main.cpp
- Size 65KB
- SHA256 84dc69c179956cffeb9647847a13a45751b9333372ebbdf067c7d156fd0c0436
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target replay_mimic_cpp/osu_config.h
- Size 10KB
- SHA256 640626f6f5392107ba29ec063454b99ce1700209fa85d07752f5ebc3123fbb6f
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target replay_mimic_cpp/osu_mimic.exe
- Size 1.2MB
- SHA256 5ca702f669a1fbd9b8222ba81aeced0e2b00aad43b32964dc89302ce315700ef
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target replay_mimic_cpp/sample_time.py
- Size 1KB
- SHA256 0fd50d63c5b88df6a6985244a81988e7aa3e79942a513d7317c2b934849b3480
Score3/10 -
- Target replay_mimic_cpp/test_5634005.py
- Size 2KB
- SHA256 672e59c7bd3f233630d8699950a29e9e535ac50d0d14b80ddc0594c6dfbce168
Score3/10 -
- Target replay_mimic_cpp/test_6787229025.py
- Size 1KB
- SHA256 401d776ab9faca50f8e2e1d23ee272fe1558023b00865f18d88c99983ceb9864
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target replay_mimic_cpp/test_all_scores.exe
- Size 149KB
- SHA256 5e1b46855a68ec2d46d9217ea7b3b96bfb5384bf9a281f11e5ce6e926e98fbdc
Score1/10 -
- Target replay_mimic_cpp/test_breakdown.py
- Size 969B
- SHA256 cadeba05a886604c0a7061bc59785eaa6344c09098afdcd671e356314e7912a5
Score3/10 -
- Target replay_mimic_cpp/test_cf_impact.py
- Size 1KB
- SHA256 95bc80e817732096860fddb7064a19abab1cc212e845a51583cf873d9e97904c
Score3/10 -
- Target replay_mimic_cpp/test_curl_vs_py.py
- Size 886B
- SHA256 7727b5b0cd15e284e16e644858dc583e42b327035cac984ba28dd78204dd667c
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target replay_mimic_cpp/test_direct_winhttp.exe
- Size 139KB
- SHA256 3a9e91a617aea4316b01bcb1816794cbd36a44862e2f50b70b4e2e75ea566a62
Score1/10 -
- Target replay_mimic_cpp/test_dl_endpoints.py
- Size 850B
- SHA256 19c70d2b098313cf0add810252217bbc248d977e8049f38f156818592e657a3f
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target replay_mimic_cpp/test_getreplay.py
- Size 740B
- SHA256 add6497e0f3515f8e644155dcabca746139b9c08cbdf5816ccd42731ab73daee
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.