General
- Target 27102026_0734_26102026_UnkLowKD23027677005_d291.iso.zip
- Size 578KB
- Sample261027-jd44hada32
- SHA256 326c38ce8c77e40e79f0a948223e41955dbaba5050025eae75b98e1efb39bb83
Score
8/10
Malware Config
Targets
-
- Target UnkLowKD23027677005.exe
- Size 382KB
- SHA256 ffeaef9bc1ce54c3fac9b9517804ca1b73b905c6c0b10ab6fd1dd5615c15bc47
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
- Target VSPMsg.dll
- Size 19KB
- SHA256 6e797e11271df97f8506922f01380655e1d7ee2f70bb86214843bcaf8eacb4d7
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.