General

  • Target

    e840195cc07bb9739e0da2dcc7a4d94c0b075a06af69146ec2757bfcc7dace05

  • Size

    182KB

  • Sample

    221114-fbhwpseg86

  • MD5

    7d6efbc7334311a833f5a4d6e9d2d676

  • SHA1

    8b18c5d997cc4af0d2b35dd5b1b5323f461cb7ed

  • SHA256

    e840195cc07bb9739e0da2dcc7a4d94c0b075a06af69146ec2757bfcc7dace05

  • SHA512

    ab915270bb4d1dd6df2c80d6543368dfe63f85b612a1806f5ebac4741c14b2da5319c281b6c902a96f25dcf6fa8530f4cf2675040d6c19653dabe37fbd8d8f49

  • SSDEEP

    3072:tuTO4rRZitPvXpmGAAXscj8U39Sq+ZDPUEMTlqbRB+GZ8ybY9eO2e:tkZqPv5mGAUys9CZDPFMTgRg5yb6eO2e

Malware Config

Targets

    • Target

      e840195cc07bb9739e0da2dcc7a4d94c0b075a06af69146ec2757bfcc7dace05

    • Size

      182KB

    • MD5

      7d6efbc7334311a833f5a4d6e9d2d676

    • SHA1

      8b18c5d997cc4af0d2b35dd5b1b5323f461cb7ed

    • SHA256

      e840195cc07bb9739e0da2dcc7a4d94c0b075a06af69146ec2757bfcc7dace05

    • SHA512

      ab915270bb4d1dd6df2c80d6543368dfe63f85b612a1806f5ebac4741c14b2da5319c281b6c902a96f25dcf6fa8530f4cf2675040d6c19653dabe37fbd8d8f49

    • SSDEEP

      3072:tuTO4rRZitPvXpmGAAXscj8U39Sq+ZDPUEMTlqbRB+GZ8ybY9eO2e:tkZqPv5mGAUys9CZDPFMTgRg5yb6eO2e

    • Azov

      A wiper seeking only damage, first seen in 2022.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks