General

  • Target

    Hydra-1.0.0+steamdb-rotation.Setup.exe

  • Size

    117.1MB

  • Sample

    240410-1tqz9afe81

  • MD5

    915643a51fff74e26e41b3978c262a43

  • SHA1

    ac2d85664828a959bea8301e1adcb07092648931

  • SHA256

    b90af3bb99211d52e5fcb4a40b34a1043225e932f17d8c6cd3361bdedaf00b6a

  • SHA512

    5c564e4980995776edcf8215cf231bc979fc9136ea1e539024ab74dfd2c559bb4dca1d5e20cbf4faabd0e68ed6866565d45bd758aa4548094d7177896b4a973d

  • SSDEEP

    1572864:JTer71KCz/xB66jSyLyOSDg4UKyE5eq/NNI41PaMnCFlaoxX4CVa2SHeTiXTyYqX:JY80erPHk41ihlaoxRa2/THMtQTh9M+

Malware Config

Targets

    • Target

      Hydra-1.0.0+steamdb-rotation.Setup.exe

    • Size

      117.1MB

    • MD5

      915643a51fff74e26e41b3978c262a43

    • SHA1

      ac2d85664828a959bea8301e1adcb07092648931

    • SHA256

      b90af3bb99211d52e5fcb4a40b34a1043225e932f17d8c6cd3361bdedaf00b6a

    • SHA512

      5c564e4980995776edcf8215cf231bc979fc9136ea1e539024ab74dfd2c559bb4dca1d5e20cbf4faabd0e68ed6866565d45bd758aa4548094d7177896b4a973d

    • SSDEEP

      1572864:JTer71KCz/xB66jSyLyOSDg4UKyE5eq/NNI41PaMnCFlaoxX4CVa2SHeTiXTyYqX:JY80erPHk41ihlaoxRa2/THMtQTh9M+

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks