General

  • Target

    63f39d58428e1939915e725a2e9a2100.bin

  • Size

    20.8MB

  • Sample

    240620-dvt2zawbpd

  • MD5

    0602f54af65bc62fc68f294687d1b0e6

  • SHA1

    aa2f8747081ea47b4e28087ffcf1a6862799290f

  • SHA256

    433257ca609f2d9d465ce125c55ff4fe754a278fec8d5720528155ead0edff9a

  • SHA512

    2450ce69c53ba087ddffd6b1e9dc2474dbaf76bf47a4a5744595f183d82c073b2aa764ac4fcac9d285f6af00aacb6e5c3332d8b52a53b6ce3ffa8663642e1b4f

  • SSDEEP

    393216:dvlZzuERZMwy4bdF5YBU+bBlvHKOQBL7S2LHQIOtbg05lwcdEQ:d9ZRZM/435qU+nvkBL79LwIOtVw4EQ

Malware Config

Targets

    • Target

      e24577f37a0125fd49fc2c8b3c76a79f9e574eaa45f64662177b28404ad95b61.msi

    • Size

      22.4MB

    • MD5

      63f39d58428e1939915e725a2e9a2100

    • SHA1

      639a1e9c8ca3e694bee4e84f32c54819bd46642f

    • SHA256

      e24577f37a0125fd49fc2c8b3c76a79f9e574eaa45f64662177b28404ad95b61

    • SHA512

      5b23f1267d926e584c2539b6f3e2402bbaaa9063a9b057cc57c83ba21f95f5027fd0848ad5f7a50a5e11c65b13124d148f0505a4565e74f1fd5a6203dbca9cd1

    • SSDEEP

      393216:K4Uj58wUV758JDRqrIfTgsfD6Ihxun07tELdW9d9K7zG16Q3:KlfUAqMRL6QxuAELd+G0l

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks