General
- Target file.zip
- Size 58.4MB
- Sample261020-gpvcbsdw31
- SHA256 79b07fac88e503f014610245c1a749d58d0fdbbfca936810eaa7bdb302ba826e
Score
7/10
Malware Config
Targets
-
- Target README.html
- Size 1KB
- SHA256 02595856ad354a47e9c664a55dc428aad19ce73a00fe95228bbe590cfca944d8
Score3/10 -
- Target UEMSAgent.msi
- Size 59.2MB
- SHA256 c9ed8526107dee9b2b81258401fd4a64916440766be3bfb733af77ca589455c5
Score7/10DCAgent remote management tool
DCAgent is part of ManageEngine, a remote administration tool that can be used as a backdoor
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target setup.bat
- Size 2KB
- SHA256 91f784bf3dd83c0f5135ac1fd00a0fdd430720ebc57ec4c2eccb7875dbc8a90d
Score3/10