Overview

overview

8

Static

static

1

SQLNative2008.msi

windows7-x64

7

SQLNative2008.msi

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    SQLNative2008.msi

  • Size

    8.0MB

  • Sample

    230720-knz3zaed9t

  • MD5

    4b52b761a1bd7ca486f61f707f7b34f3

  • SHA1

    284203c4f06433ff0d7119d6625bd793b43963ce

  • SHA256

    a842f61356caec6ae2ab6642ddf5d927f2e922d812451dd03d2644d3a868c9da

  • SHA512

    cb8b8b8f9a2312eb5036f6c67adf313a879bb9e8dcc615b5b00958e59b1e2c69df37be35ecf1a3e1c00dbf4aed36c44cccaf8879e0c214dd220982035e6fbbac

  • SSDEEP

    98304:++UzBj93eAJ4WhYXOh2zQHNHb/khZlHdu1DoQyE/NhKop9Lw8E4et1IxYxeRwHdl:+7Bjv4WDQUHN7/kBkFpy2xDsuxYRyO

Score
8/10

Malware Config

Targets

    • Target

      SQLNative2008.msi

    • Size

      8.0MB

    • MD5

      4b52b761a1bd7ca486f61f707f7b34f3

    • SHA1

      284203c4f06433ff0d7119d6625bd793b43963ce

    • SHA256

      a842f61356caec6ae2ab6642ddf5d927f2e922d812451dd03d2644d3a868c9da

    • SHA512

      cb8b8b8f9a2312eb5036f6c67adf313a879bb9e8dcc615b5b00958e59b1e2c69df37be35ecf1a3e1c00dbf4aed36c44cccaf8879e0c214dd220982035e6fbbac

    • SSDEEP

      98304:++UzBj93eAJ4WhYXOh2zQHNHb/khZlHdu1DoQyE/NhKop9Lw8E4et1IxYxeRwHdl:+7Bjv4WDQUHN7/kBkFpy2xDsuxYRyO

    Score
    8/10

    • Blocklisted process makes network request

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks