General

  • Target

    aae8f441367e5b86a5f46bfd062c42886c6df0cff410a2a91c5334e321e54200.exe

  • Size

    1.4MB

  • Sample

    221113-sy76bsbe65

  • MD5

    53acba6e2bd5c5cebeb5d07512cfb221

  • SHA1

    e8f2b5f3eae1b64f52906eee3c0f32286281b9a2

  • SHA256

    aae8f441367e5b86a5f46bfd062c42886c6df0cff410a2a91c5334e321e54200

  • SHA512

    8aecf05399ac01c40550d2cf6eade6034ba320bae372513409029c64031d5a7973ab67b9580752c01d881fc152080c1bfbd347e3c1238632d382b05928352242

  • SSDEEP

    24576:8P174Fzn8oU8hyCRZX7dRMNtdIgdoKvqUCFGEcc1G0/1:8P1Mxn8boDZX7dmN/Igdox9pG0d

Malware Config

Targets

    • Target

      aae8f441367e5b86a5f46bfd062c42886c6df0cff410a2a91c5334e321e54200.exe

    • Size

      1.4MB

    • MD5

      53acba6e2bd5c5cebeb5d07512cfb221

    • SHA1

      e8f2b5f3eae1b64f52906eee3c0f32286281b9a2

    • SHA256

      aae8f441367e5b86a5f46bfd062c42886c6df0cff410a2a91c5334e321e54200

    • SHA512

      8aecf05399ac01c40550d2cf6eade6034ba320bae372513409029c64031d5a7973ab67b9580752c01d881fc152080c1bfbd347e3c1238632d382b05928352242

    • SSDEEP

      24576:8P174Fzn8oU8hyCRZX7dRMNtdIgdoKvqUCFGEcc1G0/1:8P1Mxn8boDZX7dmN/Igdox9pG0d

    • Azov

      A wiper seeking only damage, first seen in 2022.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks