Analysis
-
max time kernel
560s -
max time network
562s -
platform
windows10_x64 -
resource
win10v20201028 -
submitted
28-01-2021 15:57
Static task
static1
Behavioral task
behavioral1
Sample
sdf.exe
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
sdf.exe
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
General
-
Target
sdf.exe
-
Size
25KB
-
MD5
7e061f92fd4e38ecaaea9335597d0379
-
SHA1
8fb58404332ae956307e8ba5ec88e71000386bc2
-
SHA256
ce8c56d52e1f156e13071b65cc73794b143f3f3714a26166e6600023b81ee2fd
-
SHA512
95e46e33bbd9b4f099163d9b5216c7cdcec0b4330c8f76da6723a5f746dd3d0e276a01ffe5e6d331cdc7b53f5228ed6391ee01bced547da72771e10a038be40a
Score
6/10
Malware Config
Signatures
-
Enumerates connected drives 3 TTPs 24 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\F: sdf.exe File opened (read-only) \??\H: sdf.exe File opened (read-only) \??\M: sdf.exe File opened (read-only) \??\P: sdf.exe File opened (read-only) \??\T: sdf.exe File opened (read-only) \??\V: sdf.exe File opened (read-only) \??\X: sdf.exe File opened (read-only) \??\E: sdf.exe File opened (read-only) \??\Y: sdf.exe File opened (read-only) \??\R: sdf.exe File opened (read-only) \??\S: sdf.exe File opened (read-only) \??\Z: sdf.exe File opened (read-only) \??\Q: sdf.exe File opened (read-only) \??\I: sdf.exe File opened (read-only) \??\J: sdf.exe File opened (read-only) \??\O: sdf.exe File opened (read-only) \??\U: sdf.exe File opened (read-only) \??\A: sdf.exe File opened (read-only) \??\G: sdf.exe File opened (read-only) \??\K: sdf.exe File opened (read-only) \??\L: sdf.exe File opened (read-only) \??\N: sdf.exe File opened (read-only) \??\W: sdf.exe File opened (read-only) \??\B: sdf.exe