Overview

overview

10

Static

static

10

USBDeview.chm

windows10-1703-x64

1

USBDeview.exe

windows10-1703-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    usbdeview FREEE.zip

  • Size

    99KB

  • Sample

    230411-tq1xqade68

  • MD5

    5d621a87aa17550d21048c090427dd47

  • SHA1

    4648eb0416c2dfb2a3d9ef1dc314f69d460a270b

  • SHA256

    13b39494244f4514cf000b1455398a86b9fc47d1943dbfb9ef25720845dd03e8

  • SHA512

    ef6bb4b90f88c1c87ad86854af8a5c93aa338ab04e027263b7736b9b9dfb16091901b267c979b404f5fa26f695f1ffc215542f006d04a2b65e93876d289811f1

  • SSDEEP

    1536:1QnkijsUsfzPBO4rZwKcuhX8mcEQ4MyGYb31OAICGfOZ738ieL0Ul1iBH7YD/agF:1PIsUsfjprZDhX8d6UYL6w738iWlCu

Score
10/10

Malware Config

Targets

    • Target

      USBDeview.chm

    • Size

      24KB

    • MD5

      ef8d0a30da9ab8cdbbbd62d74bce1187

    • SHA1

      06441c5dfa4b9577afc989454216ea014a49b8d6

    • SHA256

      d5909ca92c389ab1c01909a6f07fd351e2a655be97931caaecc3307a9e8f26e1

    • SHA512

      695faa16c29d0ca5bdb2afc5da3e05f25a6b17ce4dbee43aebc9ffdbe18d843273437bb0189bb1ef2a4ececbb236aefe634f38f94a179e593edaa6105fb2e789

    • SSDEEP

      384:ZaeGDZD/3k0Xb1/WN1iA73A8f2ZVDUDjGTa1Mu72:Za1ZtijuVDUHGO1j6

    Score
    1/10
    behavioral1

    • Target

      USBDeview.exe

    • Size

      135KB

    • MD5

      d0d19f2cccacf70bc84846076acc11c8

    • SHA1

      21154b5b479aaae4c56aec309bf6964eb52d1ce1

    • SHA256

      63012ea9ce8ed335db7bdd33fa7bb449aa1ba31755c6845c1e79c11cb60dc908

    • SHA512

      b45a024e3e22821c3a9fec56969fda164acab0f12a28a29a8c9263373004b57a246ff46f90a81b65714b09d788ed8c265de130eab059c546caae79b6d15b73d4

    • SSDEEP

      3072:xFRB1T0ABjInqx9sKJQ1jrD0ivz0ll27ENCP7g8g3OaAy:xFRBVnj0qxbJQp/0iolGENC6RL

    Score
    6/10

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral2

MITRE ATT&CK Enterprise v6

Tasks