General

  • Target

    hdtunepro_575_trial.exe

  • Size

    2.1MB

  • Sample

    240224-wfsjpsag7z

  • MD5

    a359cb890358b297a56c835943c72d8c

  • SHA1

    ec24057ddcd40ed17324bb14bc29a92a2708d44b

  • SHA256

    2ec24e6084a1da51bf5e19ad9fbe5ef564dd9cd77ad778714af6d2e8637f1ff4

  • SHA512

    cddd33b249816841697c9bdb4c900a979a15f039110f9895c053031a98880b36b032a5634db48c0de46fafc3de80a8e853ee7f3b58429d70fc3c7ff74c00fcb8

  • SSDEEP

    49152:5aNwX8gkS3ZZhlSHJ8FRQ3Reu7+iQmArGLhTM5DjEF2dTO9g4FY:QFFCZh0HJKMMgUGLK5rI8

Malware Config

Targets

    • Target

      hdtunepro_575_trial.exe

    • Size

      2.1MB

    • MD5

      a359cb890358b297a56c835943c72d8c

    • SHA1

      ec24057ddcd40ed17324bb14bc29a92a2708d44b

    • SHA256

      2ec24e6084a1da51bf5e19ad9fbe5ef564dd9cd77ad778714af6d2e8637f1ff4

    • SHA512

      cddd33b249816841697c9bdb4c900a979a15f039110f9895c053031a98880b36b032a5634db48c0de46fafc3de80a8e853ee7f3b58429d70fc3c7ff74c00fcb8

    • SSDEEP

      49152:5aNwX8gkS3ZZhlSHJ8FRQ3Reu7+iQmArGLhTM5DjEF2dTO9g4FY:QFFCZh0HJKMMgUGLK5rI8

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks