General

  • Target

    Intel Bluetooth.msi

  • Size

    15.4MB

  • Sample

    230305-31dplshh79

  • MD5

    186366f132f73198f9d74ee13e144ff5

  • SHA1

    df84adb264062fbb202dc9d8bca5b0694572e0af

  • SHA256

    0a17e0fad3622f75d4c17ca967fd17fa611f71769f75b86dba3ee374fb2160cf

  • SHA512

    5a53c18d6ab16234991cb0eaa8b4158166bb03793757bca4799ef4eb871c7eb3a9df6b5eaf65bdcf1a1fd06a80be89e6596dd4395b7669f58714a9d11c3b8f92

  • SSDEEP

    196608:0gWAgyu8Q6FYF7xNPTsaEoiZo0uPk2YCkYf+t0bnqgO8afGXtKIM1fwv:hWAdNYFlNPYzTHuPiw+gncVeIIMO

Score
8/10

Malware Config

Targets

    • Target

      Intel Bluetooth.msi

    • Size

      15.4MB

    • MD5

      186366f132f73198f9d74ee13e144ff5

    • SHA1

      df84adb264062fbb202dc9d8bca5b0694572e0af

    • SHA256

      0a17e0fad3622f75d4c17ca967fd17fa611f71769f75b86dba3ee374fb2160cf

    • SHA512

      5a53c18d6ab16234991cb0eaa8b4158166bb03793757bca4799ef4eb871c7eb3a9df6b5eaf65bdcf1a1fd06a80be89e6596dd4395b7669f58714a9d11c3b8f92

    • SSDEEP

      196608:0gWAgyu8Q6FYF7xNPTsaEoiZo0uPk2YCkYf+t0bnqgO8afGXtKIM1fwv:hWAdNYFlNPYzTHuPiw+gncVeIIMO

    Score
    8/10
    • Blocklisted process makes network request

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks