General
- Target Oranga.exe
- Size 55KB
- Sample261002-t6v2ea1ycs
- SHA256 32e8e463ff8cc544fbe31b5299e93e603fd589a02d2fdab8179f4ff3f207590b
Score
7/10
Malware Config
Targets
-
- Target Oranga.exe
- Size 55KB
- SHA256 32e8e463ff8cc544fbe31b5299e93e603fd589a02d2fdab8179f4ff3f207590b
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
VMProtect packed file
Detects executables packed with VMProtect commercial packer.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Network Service Discovery
Attempt to gather information on host's network.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Discovery
Browser Information Discovery
1Network Service Discovery
1Peripheral Device Discovery
2Query Registry
4System Information Discovery
4System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1System Time Discovery
1