Overview

overview

8

Static

static

1

spacedesk_...19.msi

windows10-1703-x64

8

spacedesk_...19.msi

windows10-2004-x64

6

spacedesk_...19.msi

windows11-21h2-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    spacedesk_driver_Win_10_64_v2119.msi

  • Size

    4.7MB

  • Sample

    240523-ak8wlaee92

  • MD5

    8538809ffaf669825da157d0ef65e99c

  • SHA1

    3d8b64fd82e046caaa517b783bdf6bf8e088aca6

  • SHA256

    bfd94abece2bea6fa71962eceaeef10c6d270aaa104764dd2f242991ddc2a78c

  • SHA512

    d736b3299b03eeae61659e2d85f3f2d197a629ac86eff7bca054b90deee852805e11372a9fa5e983ed7fd118736729e43f217ee61844ddd576aba6c828211a35

  • SSDEEP

    98304:Nfbnf/+/tZQ40Ty+10l+Ycn4akTejHDA:NfzMtZmzkq

Score
8/10

Malware Config

Targets

    • Target

      spacedesk_driver_Win_10_64_v2119.msi

    • Size

      4.7MB

    • MD5

      8538809ffaf669825da157d0ef65e99c

    • SHA1

      3d8b64fd82e046caaa517b783bdf6bf8e088aca6

    • SHA256

      bfd94abece2bea6fa71962eceaeef10c6d270aaa104764dd2f242991ddc2a78c

    • SHA512

      d736b3299b03eeae61659e2d85f3f2d197a629ac86eff7bca054b90deee852805e11372a9fa5e983ed7fd118736729e43f217ee61844ddd576aba6c828211a35

    • SSDEEP

      98304:Nfbnf/+/tZQ40Ty+10l+Ycn4akTejHDA:NfzMtZmzkq

    Score
    8/10

    • Drops file in Drivers directory

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks