General

  • Target

    NETSETUPSVC.DLL

  • Size

    313KB

  • Sample

    210208-28e84pkv36

  • MD5

    35abfb98dac5bf48f7ac0e67afc9bdb7

  • SHA1

    9185029c2630b220a74620c8f3d04886a457e1cf

  • SHA256

    1817a5bf9c01035bcf8a975c9f1d94b0ce7f6a200339485d8f93859f8f6d730c

  • SHA512

    93f1336e3bc7ac01561f0ad7ce5fec7ae078e55db0f5b0cf0663cb5dbbe2acb08f27490da179e27579debc04843bf02f047456c516bf0345ba827e0efe85149a

Malware Config

Targets

    • Target

      NETSETUPSVC.DLL

    • Size

      313KB

    • MD5

      35abfb98dac5bf48f7ac0e67afc9bdb7

    • SHA1

      9185029c2630b220a74620c8f3d04886a457e1cf

    • SHA256

      1817a5bf9c01035bcf8a975c9f1d94b0ce7f6a200339485d8f93859f8f6d730c

    • SHA512

      93f1336e3bc7ac01561f0ad7ce5fec7ae078e55db0f5b0cf0663cb5dbbe2acb08f27490da179e27579debc04843bf02f047456c516bf0345ba827e0efe85149a

    Score
    5/10
    • Enumerates physical storage devices

      Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

MITRE ATT&CK Enterprise v6

Tasks