General

  • Target

    2deb4602791e90b5041a12f9d6b7034a

  • Size

    256KB

  • Sample

    231231-jmdmxadbg8

  • MD5

    2deb4602791e90b5041a12f9d6b7034a

  • SHA1

    22c2a38a533e964d54fac0c8e27d18551d236015

  • SHA256

    cabbf91f43e189e56553a9d1b8ebaf891838f3387f0f9b6baa9b7355cd725da3

  • SHA512

    ef7236ba91c5682c84ce067a5e8fe1760e32b2691ee74928d2dc60e5457b13732851529c83d1ce382c94bc496fb3f03a9826bb532c41452526be6a11af0da3d5

  • SSDEEP

    6144:fDLQxoyQ1LpnFyZ+dayL9rvolH8u3ZhGod:3QCyQ1LHk+zR7QHjGo

Malware Config

Targets

    • Target

      2deb4602791e90b5041a12f9d6b7034a

    • Size

      256KB

    • MD5

      2deb4602791e90b5041a12f9d6b7034a

    • SHA1

      22c2a38a533e964d54fac0c8e27d18551d236015

    • SHA256

      cabbf91f43e189e56553a9d1b8ebaf891838f3387f0f9b6baa9b7355cd725da3

    • SHA512

      ef7236ba91c5682c84ce067a5e8fe1760e32b2691ee74928d2dc60e5457b13732851529c83d1ce382c94bc496fb3f03a9826bb532c41452526be6a11af0da3d5

    • SSDEEP

      6144:fDLQxoyQ1LpnFyZ+dayL9rvolH8u3ZhGod:3QCyQ1LHk+zR7QHjGo

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

    • Deletes itself

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks