General
- Target crusader.zip
- Size 116KB
- Sample260910-hse79azdkg
- SHA256 e457db58e454c2a033d8168e8df12b0d9dd43ca3dc9052fc219bf42b674b2321
Malware Config
Targets
-
- Target crusader.zip
- Size 116KB
- SHA256 e457db58e454c2a033d8168e8df12b0d9dd43ca3dc9052fc219bf42b674b2321
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Loader.bat
- Size 1KB
- SHA256 616332a6962b36efa55e333ce718fc1396fe496ff98a9c30ed2743d650c65253
Score3/10 -
- Target README.txt
- Size 826B
- SHA256 59fb5853d8e995eb00b346120b3fa6acc40723e6ffa012f95d725310e2ca5dbf
Score1/10 -
- Target cache_001.zip
- Size 111KB
- SHA256 6a40224143a05acc7aec58a049d9ab33f0d1dca8258a889b61ca99e388bc3c67
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target cache_001.zip
- Size 106KB
- SHA256 6f82379f043b47c466c17a08198ea97345dc3c793b96754413444f1dd69efa11
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target cache_005.zip
- Size 101KB
- SHA256 895ffbdd141594c21dafd6dc22fb90ae9d9e72fd47989a0dbd1b7364cb8e4003
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target cache_006.zip
- Size 101KB
- SHA256 895ffbdd141594c21dafd6dc22fb90ae9d9e72fd47989a0dbd1b7364cb8e4003
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target cache_007.zip
- Size 101KB
- SHA256 895ffbdd141594c21dafd6dc22fb90ae9d9e72fd47989a0dbd1b7364cb8e4003
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target cache_008.zip
- Size 101KB
- SHA256 895ffbdd141594c21dafd6dc22fb90ae9d9e72fd47989a0dbd1b7364cb8e4003
Score1/10 -
- Target cache_009.zip
- Size 101KB
- SHA256 895ffbdd141594c21dafd6dc22fb90ae9d9e72fd47989a0dbd1b7364cb8e4003
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target cache_010.zip
- Size 101KB
- SHA256 895ffbdd141594c21dafd6dc22fb90ae9d9e72fd47989a0dbd1b7364cb8e4003
Score1/10 -
- Target manifest.txt
- Size 49B
- SHA256 dff949233e21b058b0f3fd58acd68f9ee7250a068141e7ae659773935fe4c043
Score1/10 -
- Target cache_002.zip
- Size 106KB
- SHA256 6f82379f043b47c466c17a08198ea97345dc3c793b96754413444f1dd69efa11
Score1/10 -
- Target cache_003.zip
- Size 106KB
- SHA256 6f82379f043b47c466c17a08198ea97345dc3c793b96754413444f1dd69efa11
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target cache_004.zip
- Size 106KB
- SHA256 6f82379f043b47c466c17a08198ea97345dc3c793b96754413444f1dd69efa11
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target cache_005.zip
- Size 106KB
- SHA256 6f82379f043b47c466c17a08198ea97345dc3c793b96754413444f1dd69efa11
Score1/10