General
- Target aimwhere.zip
- Size 34.2MB
- Sample261029-1xp75agw2j
- SHA256 91a389e9fa464175868e1f0260e479580bc780519dd3e2ac3f33fcfa07ef096f
Score
8/10
Malware Config
Targets
-
- Target Extreme Injector v3.exe
- Size 1.9MB
- SHA256 b65f40618f584303ca0bcf9b5f88c233cc4237699c0c4bf40ba8facbe8195a46
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target aimwhere.dll
- Size 29.7MB
- SHA256 9852c842af083df398ad939cc46374a0b4b3be08cdb5ad3cd3848ce7d8cd89cb
Score1/10 -
- Target game.bat
- Size 511B
- SHA256 1ec3c807ebe7732fad3e483ec500d08668dd411898244c7fc889fe4fa613bff4
Score3/10 -
- Target newnl.dll
- Size 14.1MB
- SHA256 03c8ab74b4318cf17c87be8b39f4d868dba4ee1aa45d60fe38ab781a54b3eb57
Score1/10