General
- Target SiloAI.zip
- Size 20.8MB
- Sample261027-mx2dhadt6l
- SHA256 7b55a0cce9a65ba19901d1d3e3c4e0137d6e78155977e175f414e3ea002cac02
Score
6/10
Malware Config
Targets
-
- Target SiloAI.exe
- Size 4.2MB
- SHA256 4dbedc9ed26ca15103eafef15f9b7bdcacaedc61b1e61ef5ce393dbdf4888aba
Score6/10-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
- Target bin/res.exe
- Size 11.5MB
- SHA256 c5002ed4869d998b79b13c8365af9d7403f80d7218ad34f429f94fc662e33ebd
Score4/10 -
- Target bin/tor.exe
- Size 9.7MB
- SHA256 1e02f3d7074d82d9ce76ea3dcf9a9d6fcc68f25745888c47e7eee88fd6b67cb9
Score3/10 -
- Target version.dll
- Size 103KB
- SHA256 d98e929adc6dea5d76b64b956d02dc7a6563f03a0e09f0e7e6c164045ad3a02b
Score4/10 -
- Target vresion.dll
- Size 31KB
- SHA256 af45a728552ccfdcd9435c40ace60a9354d7c1b52abf507a2f1cb371dada4fde
Score1/10
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1