Overview
overview
4Static
static
4HDDScan.zip
windows7-x64
1HDDScan.zip
windows10-2004-x64
1HDDScan.exe
windows7-x64
3HDDScan.exe
windows10-2004-x64
3res/DEFECTSL.xml
windows7-x64
1res/DEFECTSL.xml
windows10-2004-x64
1res/DEFECTSP.xml
windows7-x64
1res/DEFECTSP.xml
windows10-2004-x64
1res/Flash.ini
windows7-x64
1res/Flash.ini
windows10-2004-x64
1res/IDEID.xml
windows7-x64
1res/IDEID.xml
windows10-2004-x64
1res/SCSIID.xml
windows7-x64
1res/SCSIID.xml
windows10-2004-x64
1res/SMART.xml
windows7-x64
1res/SMART.xml
windows10-2004-x64
1res/SMART_SCSI.xml
windows7-x64
1res/SMART_SCSI.xml
windows10-2004-x64
1res/TEST.xml
windows7-x64
1res/TEST.xml
windows10-2004-x64
1res/User Manual.pdf
windows7-x64
1res/User Manual.pdf
windows10-2004-x64
1Analysis
-
max time kernel
142s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
18/04/2024, 17:58
Behavioral task
behavioral1
Sample
HDDScan.zip
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
HDDScan.zip
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
HDDScan.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
HDDScan.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
res/DEFECTSL.xml
Resource
win7-20240215-en
Behavioral task
behavioral6
Sample
res/DEFECTSL.xml
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
res/DEFECTSP.xml
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
res/DEFECTSP.xml
Resource
win10v2004-20240412-en
Behavioral task
behavioral9
Sample
res/Flash.ini
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
res/Flash.ini
Resource
win10v2004-20240412-en
Behavioral task
behavioral11
Sample
res/IDEID.xml
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
res/IDEID.xml
Resource
win10v2004-20240412-en
Behavioral task
behavioral13
Sample
res/SCSIID.xml
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
res/SCSIID.xml
Resource
win10v2004-20240412-en
Behavioral task
behavioral15
Sample
res/SMART.xml
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
res/SMART.xml
Resource
win10v2004-20240412-en
Behavioral task
behavioral17
Sample
res/SMART_SCSI.xml
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
res/SMART_SCSI.xml
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
res/TEST.xml
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
res/TEST.xml
Resource
win10v2004-20240412-en
Behavioral task
behavioral21
Sample
res/User Manual.pdf
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
res/User Manual.pdf
Resource
win10v2004-20240412-en
General
-
Target
res/SMART_SCSI.xml
-
Size
5KB
-
MD5
2696f1cde0a561c99237b516d48fba02
-
SHA1
446c8af00bcca6423dc467012cdf672223841fae
-
SHA256
48c4fc58bcbe34ea4a9daaa42e03cb0bf27efde0798d5411efc5e597d2ceaa77
-
SHA512
c98bce602cef8ad1cc003532ea6f293a525d801eb91d0a7ff3c4540a47d8d832005eeef5edbeccb4707166ac92e028273bdc54e3c4773397cb4ebd6fa1d8922c
-
SSDEEP
96:WO1vSS4K8dllhCu0LAWAFtAlAbAXSAA0K8d5qkAAEkXAoIwR:WO1vSSl8dllhCuLcsJ8d5DnlIwR
Malware Config
Signatures
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\res\SMART_SCSI.xml"1⤵PID:4752
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3804 --field-trial-handle=2264,i,15001568551143786084,90255922961447677,262144 --variations-seed-version /prefetch:81⤵PID:1616