General
- Target jaffacakes118_869d206979f4372f6917e6376200b26f6cdb60e287e8fdb763c145fdd8575b3f.bin
- Size 495KB
- Sample260912-jd44hatxay
- SHA256 869d206979f4372f6917e6376200b26f6cdb60e287e8fdb763c145fdd8575b3f
Score
8/10
Malware Config
Targets
-
- Target Fibranne.exe
- Size 622KB
- SHA256 08d1429d02241b2ff9844c47434cd8b0d10e703cc4c58b27a0f220b2f68443cc
Score6/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target Knitrende22.Nyg48
- Size 56KB
- SHA256 5fbade1b76e44a07fa279a3c4120ab1faf330c906ba601ffa6de8dfb68e2347a
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target anaptomorphus.app
- Size 223KB
- SHA256 acbbf161cf4d5d389fae73170582f2e6f5ac12c2ab4a868956e9ef961dfc8cd7
Score4/10