Overview

overview

6

Static

static

1

processhac...in.zip

windows7-x64

6

processhac...in.zip

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    processhacker-2.39-bin.zip

  • Size

    3.2MB

  • Sample

    231102-cwp9qsfc6y

  • MD5

    b444cf14642ce9b8d75e079166a5df0b

  • SHA1

    8e8f8423d163d922242b8b7d85427664f77edc97

  • SHA256

    2afb5303e191dde688c5626c3ee545e32e52f09da3b35b20f5e0d29a418432f5

  • SHA512

    915b9f7c0b1374ce52fa9653ba1084741d15ff79dbb7c04d2a0f41eea8262b2f556d451bf9eefbd2d32831289908b6a1b39ce2cbcafbbfc4ae6e71d701b1aa81

  • SSDEEP

    98304:jDqt5TrOmlLB/7rTOqcXfOzJR1qioDLK2EbhQ:3sTrHlB73OqX4ioDfshQ

Score
6/10

Malware Config

Targets

    • Target

      processhacker-2.39-bin.zip

    • Size

      3.2MB

    • MD5

      b444cf14642ce9b8d75e079166a5df0b

    • SHA1

      8e8f8423d163d922242b8b7d85427664f77edc97

    • SHA256

      2afb5303e191dde688c5626c3ee545e32e52f09da3b35b20f5e0d29a418432f5

    • SHA512

      915b9f7c0b1374ce52fa9653ba1084741d15ff79dbb7c04d2a0f41eea8262b2f556d451bf9eefbd2d32831289908b6a1b39ce2cbcafbbfc4ae6e71d701b1aa81

    • SSDEEP

      98304:jDqt5TrOmlLB/7rTOqcXfOzJR1qioDLK2EbhQ:3sTrHlB73OqX4ioDfshQ

    Score
    6/10

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks