General
- Target 820151246_Fast_Universalis.zip
- Size 230KB
- Sample260912-pc3f6sbd65
- SHA256 648edf8d4b844ad0a774d95dc81b309aa8cedfe158065200015d45599ec45366
Malware Config
Targets
-
- Target 820151246_Fast_Universalis.zip
- Size 230KB
- SHA256 648edf8d4b844ad0a774d95dc81b309aa8cedfe158065200015d45599ec45366
Score1/10 -
- Target 820151246.mod
- Size 174B
- SHA256 d376c4a61dacaa19eb820b7c4c3464002633030bd9157e65629c1526d55c1456
Score6/10-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target 820151246/descriptor.mod
- Size 152B
- SHA256 5c0f8f1ce3f9a29099a6fd9be8d67d800829af1e527f06023add513c22713183
Score6/10-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target 820151246/fastuniversalis.jpg
- Size 160KB
- SHA256 ecff2fbd8b81588d20a1f9bff249866117b81e64c68b33bd61fb303d28dae596
Score1/10 -
- Target 820151246/gfx/FX/border.shader
- Size 4KB
- SHA256 b3367c641c900423020da9075bdf2f0a0b5e66e329bac706a23cb1dd23522a3e
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target 820151246/gfx/FX/pdxmap.fxh
- Size 536B
- SHA256 d255859eec3fac1f235d653a68e5a056fc39e1df6cd180dd51c2b9d971818c07
Score3/10 -
- Target 820151246/gfx/FX/pdxmap.shader
- Size 13KB
- SHA256 66b2a939d94401b01902a611517243e5c6d446589fd2eabb2cd89757a1a3ab3f
Score3/10 -
- Target 820151246/gfx/FX/pdxmesh.shader
- Size 18KB
- SHA256 8c3326368f7fb71a201c1e4cf8da4d234eafd38ad25bbb6243a52862a6371490
Score3/10 -
- Target 820151246/gfx/FX/pdxwater.shader
- Size 8KB
- SHA256 f246a5268ebcfdde9fbf6c3871a405a848cbbab5bd471f19a1cd57c92fb64278
Score3/10 -
- Target 820151246/gfx/FX/river.shader
- Size 4KB
- SHA256 ca442f7044ee95c5e055fd1c5fb39d155a2425f503a823f0d706ecb68fec8077
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target 820151246/gfx/FX/sky.shader
- Size 1KB
- SHA256 41844ace04829e75658552c73c5057308220a816ab6ce0319d469e27fd3aaf93
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target 820151246/gfx/FX/standardfuncsgfx.fxh
- Size 8KB
- SHA256 7971d6de95c8073088bf6384e6238450aa24aba31af0756a1e224e8e46e2fdfe
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target 820151246/gfx/entities/__saup_units.asset
- Size 16KB
- SHA256 3a2a207cd579d1c4ef86c4bd03e94177e2302ed6cffced795780d9975655ea38
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target 820151246/gfx/entities/_dharma_entities.asset
- Size 1KB
- SHA256 b92f18c5fec8eb8919bacda9fff0ace761cb4503a63ab231cd8cde41ba8ea7c1
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target 820151246/gfx/entities/_hindup_units.asset
- Size 686B
- SHA256 104c4e25d1e2a19bb9cdee1df7f614616e00925dcf349ac61eae658b3be32ced
Score3/10 -
- Target 820151246/gfx/entities/_musup_units.asset
- Size 399B
- SHA256 476ede275b4125095c6b66c07e0e67bbff9c8f8de398e2a9b5b8a10bf2f4323b
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.