General
-
Target
Hydrogen.Executor.zip
-
Size
85.6MB
-
Sample
240420-dcn31afd7t
-
MD5
e61090d9c494205716ce07e216c516fe
-
SHA1
79b40350b3f830729fc606fc20b49199fcd810e5
-
SHA256
f702c7c051c0c3d4bc1659043e05dcb7123b1af54290a7c3256beefe57509be5
-
SHA512
a135c786d282ed0b8b93e9b40ac08f67e5a962cde5d97bb90053839cfc1dfb38bfaec6a45b4a4537cb692dcbffc137200b945d6b35516ce4efc558692f31572c
-
SSDEEP
1572864:hcx9w7eIojpcgSzxRAoc12VW7+UL2FdPfVzkSHM45k6CMv:27waIo1cxzvQycsnz5X5ktMv
Static task
static1
Behavioral task
behavioral1
Sample
Hydrogen Executor.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
Hydrogen Executor.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
Hydrogen Executor.exe
Resource
win11-20240412-en
Malware Config
Targets
-
-
Target
Hydrogen Executor.exe
-
Size
87.4MB
-
MD5
5f7018c89dee4d3db828f3fc9528eacf
-
SHA1
6499700a591170fd9c16c46fd595513d04780725
-
SHA256
d865f038da4b29cc29a4844192f0f03392b71d24c4ce9e57c0064922cab1f5dd
-
SHA512
72a09ad2b1ca4e7be33384001b9be0aea4eff4dc00da7327d1082f600d5d6dcc699c93e263c2bbe31b8ffb096f34acbf843372a0bcbd80bbcb76add4282d760a
-
SSDEEP
1572864:6GEtafWbeU6vnhdFSPp814nsXYKgc3HkTfiU9+6k+w75Y3346qKX:6afFU6/rwPyc3KSf+6E1y34bKX
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Matrix ATT&CK v13
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1