Overview

overview

8

Static

static

1

dotnet-sdk...64.exe

windows7-x64

8

dotnet-sdk...64.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    dotnet-sdk-7.0.102-win-x64.exe

  • Size

    200.2MB

  • Sample

    230209-hf5mdagd22

  • MD5

    055697b51108abfb441f657ccf7eb9a3

  • SHA1

    9c750923ef2862b8c9e7f0f038932f3eec566900

  • SHA256

    dac82d7316c0bf7503c5e364db4099f8b9ad45dfa6a7ae658a291869aefb2b97

  • SHA512

    1fbfce7951fb95b0219f56c409740767f3fde397b9ec77a1c7aff2b9184e4b93a009a605ca301b3030398d47ae018918555c49613015b2397de8b8690f7fd99a

  • SSDEEP

    6291456:WmuDzQoOnlWXD88VKJ6uohhp0RcK6x90R/NkJrD5Y:W/zenlWXD85kxhhp05/uo

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      dotnet-sdk-7.0.102-win-x64.exe

    • Size

      200.2MB

    • MD5

      055697b51108abfb441f657ccf7eb9a3

    • SHA1

      9c750923ef2862b8c9e7f0f038932f3eec566900

    • SHA256

      dac82d7316c0bf7503c5e364db4099f8b9ad45dfa6a7ae658a291869aefb2b97

    • SHA512

      1fbfce7951fb95b0219f56c409740767f3fde397b9ec77a1c7aff2b9184e4b93a009a605ca301b3030398d47ae018918555c49613015b2397de8b8690f7fd99a

    • SSDEEP

      6291456:WmuDzQoOnlWXD88VKJ6uohhp0RcK6x90R/NkJrD5Y:W/zenlWXD85kxhhp05/uo

    Score
    8/10
    discoverypersistence

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks