General

  • Target

    4aeef4de863db00393011329e04e6794f7eec927a263177219c7987c8850868d

  • Size

    110KB

  • Sample

    221207-n8aklahf8t

  • MD5

    50813e702c1dab0adc35b0fb09c8cd3f

  • SHA1

    e40b43ba45fb8fb3aa3390a2677b13a78743ac7f

  • SHA256

    4aeef4de863db00393011329e04e6794f7eec927a263177219c7987c8850868d

  • SHA512

    9fe20f7ce98416632a6b3664cc2723ac3922b648b3b5f33caf2c9680063108e1cc4d478df8af4b901917aaae2c776bdbadf9b3eeebc43031aa310b121389e690

  • SSDEEP

    1536:3j+OMKv2sRvXuhi3ugiXjtzkZ3Tx4rVozJwbX4EQkuZSzkwlrlp050MWDo1u/KEv:3jHvCU39g4Tx4rVKZmuyNX050MW813Ev

Malware Config

Targets

    • Target

      4aeef4de863db00393011329e04e6794f7eec927a263177219c7987c8850868d

    • Size

      110KB

    • MD5

      50813e702c1dab0adc35b0fb09c8cd3f

    • SHA1

      e40b43ba45fb8fb3aa3390a2677b13a78743ac7f

    • SHA256

      4aeef4de863db00393011329e04e6794f7eec927a263177219c7987c8850868d

    • SHA512

      9fe20f7ce98416632a6b3664cc2723ac3922b648b3b5f33caf2c9680063108e1cc4d478df8af4b901917aaae2c776bdbadf9b3eeebc43031aa310b121389e690

    • SSDEEP

      1536:3j+OMKv2sRvXuhi3ugiXjtzkZ3Tx4rVozJwbX4EQkuZSzkwlrlp050MWDo1u/KEv:3jHvCU39g4Tx4rVKZmuyNX050MW813Ev

    • Azov

      A wiper seeking only damage, first seen in 2022.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks