General

  • Target

    Windows 2000 Professional.ISO

  • Size

    369.5MB

  • Sample

    240723-evhvdaxare

  • MD5

    369cd79f37e17e8c7e2b37fb75d59522

  • SHA1

    d0b0ad044a5c7cb62553301f8c5ec19a9c636223

  • SHA256

    08b11c3897eb38d1e6566a17cec5cdf2b3c620444e160e3db200a7e223aabbd8

  • SHA512

    fd108daff3edb2c224470d3e35f558c8f858fc4fa6ba46ed8d5b2793339c58bd43ccc09f03c9ad9c89da9899bd5e9185d8028118b7c8c1b37acc12a00d5bd3e6

  • SSDEEP

    6291456:NccrlgcTd2e/DwWqTTBqBdeBkYNtaXD14NhCUOwj47hxpqjPt:Nccr15JbwdfgQO1ShCIjOhK

Score
6/10

Malware Config

Targets

    • Target

      BOOTDISK/MAKEBOOT.EXE

    • Size

      25KB

    • MD5

      9bb01671becb932d8296c60b88bb9d27

    • SHA1

      31b181ff74f5204b24e3cf5cc8f560d924f4df4b

    • SHA256

      3f8e2f68a3ba4caa04ab11f9eaaa2927c994c3fb742c73e9d17fba3e0ba971ad

    • SHA512

      f854b2bf8b8fce10b1109adccef7875138b22ea663ae3ce288accee5fae3756456616c8a232f88ac34f67b8e509f35e7b323fb3c944d8ee9a037623387aa4adc

    • SSDEEP

      384:8hjEff7RdDLXgGNwQe+yoQruJk+i+wXMKsNvjC1gM2wOmqNth4NwA/QrG625ICY:8hjk73NwQgruGowXJgvj8OmUh4r6WY

    Score
    1/10
    • Target

      BOOTDISK/MAKEBT32.EXE

    • Size

      69KB

    • MD5

      4b2aa35fb88c6622c56043820a8c9314

    • SHA1

      4c22a857ae495198fc5d98c9e4d47cc400c07ed8

    • SHA256

      18fec74c8bd441c52d27de180be95631cfd9e3da3287295c5b8af41ed4a37044

    • SHA512

      2af846d66a2c2c64c814c5d5dc3487211d07947889cd3c3ec0337e53d6c178863a6998ed6b9ac4f0913db31724e24836d43e619afddab5349ea93b025f212fe0

    • SSDEEP

      1536:kkgUZqlyfHuvaLphwrBpB7Sv3B2/aR87BOCMLK4Rl6m:kLrY2WhwrBpB7SZTu74lLK6l6m

    Score
    1/10
    • Target

      DISCOVER/COMPATBL/COMPMAIN.HTM

    • Size

      2KB

    • MD5

      dc849ca102c591ae0a4e8786e229a5ea

    • SHA1

      753ca624699a7ce4475f68c44a17cf20ed0c728d

    • SHA256

      0b5923f7b02048973086e8085a2194b52e020377c2063a8e5f0abc6bfd2e0b43

    • SHA512

      95d29a4409a3a6799c393f9c1770518a58a4a4cd624a3ada81ccc4fc464e5c4da79f7743a7d7f3270a11e0cbccd8fe90217fafddeec66fe13f90a4e0c0d0e906

    Score
    6/10
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target

      DISCOVER/COMPATBL/DEFAULT.HTM

    • Size

      6KB

    • MD5

      ec99f6ebbac3ae9cacb2895bca9a95ae

    • SHA1

      c0d5d4a8a4f430afb2863ad4cee6d852d724d3b7

    • SHA256

      ae21dc262a7e97d01ce2b2de3bdafd8292361c0652e0b64e459f999a4480e917

    • SHA512

      655f5910c276855a0bdfb87551f60a0861855d6e2dc794ce15412e8c8db87e8794b7d794d17e667511a47a4f1e03be86f56f3022b23556a73b797fcd3c390358

    • SSDEEP

      96:RNVACQ6CQoS4mJAc082vo8UUMl8Mhl8pAZJdYbY1Ir1EWvdQSHvadB:n2+t4ncuvwUMphlWai1Qv

    Score
    6/10
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target

      DISCOVER/COMPATBL/DRVRSUPP/DIG_SIGN.HTM

    • Size

      1KB

    • MD5

      e226bd3e0c4b4a1e0f63e00a2e547cf3

    • SHA1

      d1e3a798700f27edc8376afc274b59aa24737e7e

    • SHA256

      230ab21a647d6fae936c0014d83fb08063bf2f7e0967d256e804be7406e9293b

    • SHA512

      669bc10973d2116b62ab05d5eeffcd50d49c645d725edcb09e75f842585852eebf14ed25190619427d5d0984c3d704f03c254e89be12250d7756ad89da569c39

    Score
    1/10
    • Target

      DISCOVER/COMPATBL/DRVRSUPP/DRVSUPMN.HTM

    • Size

      1KB

    • MD5

      2d4463c2c28461e695e373b50a81f089

    • SHA1

      db236e15a1ba8900ab4c56add0d35e7485270ef6

    • SHA256

      564ca94be408009b978e489ab9ba6669f448ea80483809739bec17f1923edd77

    • SHA512

      4a80d0aaeef6ec481b22b9f52d31481234e89e985986b950e5951d9a4676b9399d6082ae11a363c8379a18c8971459b46a8884f4c69956e9f82cefda4139f2b5

    Score
    6/10
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target

      DISCOVER/COMPATBL/DRVRSUPP/MORE_DRV.HTM

    • Size

      1KB

    • MD5

      4612ff5086663c9e02ca016594c215ab

    • SHA1

      46c618daf21c15eb9fbb8faaab22c0468fb7acdd

    • SHA256

      23e7b5028569661587880590cd3714a8f13c6e378a225f54b85df7fee16fa8d0

    • SHA512

      72fe363555626d3687bd9109f845af8e57db54e5f1df7f8e7c99ce2e79076a0633abd0c3991b5b1977b3472c9113346e4061ca7ef92b2c79d0e36c0eb2b68147

    Score
    1/10
    • Target

      DISCOVER/COMPATBL/LGCYSUPP/HARDWARE.HTM

    • Size

      1KB

    • MD5

      2d86076bf76d95b65093314fec566197

    • SHA1

      c3b92648fce089ef83cd1d29a280ca1afa4a93e2

    • SHA256

      79edf77b1bf53c5d7381458159d112f13c83ed3cde1e87fc65b500553dfc87e7

    • SHA512

      52a012858b5c947b803d1496a6bd123b30a6923ae8d5edd8bad299c6a810cfa0967f4eaffaed99e5d3b5b0eba1e872a4e15fb17b5d61661f844ca99d368960a9

    Score
    1/10
    • Target

      DISCOVER/COMPATBL/LGCYSUPP/LGCYMAIN.HTM

    • Size

      1KB

    • MD5

      03bd06e0af56571cc95830c5be51eadb

    • SHA1

      4e6d7c1302f34991731d657ca47a46d146378915

    • SHA256

      39d3ec21c097db7e310eecfba076bcca54225b54ee70fccb733f7dc7cb9172e8

    • SHA512

      58c1816a38177f22564699b8665f087d4d75f65f3e2b65c885e0dd9d377b7f7abc4f43cb171c9c39a4726f6f498973f216f697c1c2ae83fb8bb25abad36ed888

    Score
    6/10
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target

      DISCOVER/COMPATBL/LGCYSUPP/SOFTWARE.HTM

    • Size

      1KB

    • MD5

      e465dd5daaa8c64e71c01dbe04fce846

    • SHA1

      aed880e5444ea24009b9ae3c8a0da559259adf17

    • SHA256

      c6a828cd6bb199207031cff469e32d6a1c5582ba400e7717631dedc526172b9c

    • SHA512

      a55eeb804919fdcfcc56b6c76832be6319524d7d6c19cdea5fe6daa019d6180130e0ed871c44c75f482e82e879e34f0fcca68974fa72561448e1fad525a3b284

    Score
    1/10
    • Target

      DISCOVER/COMPATBL/MULTSUPP/DVD.HTM

    • Size

      1KB

    • MD5

      9f57fca9097f736cdd50b47aac0b0a7b

    • SHA1

      63f7eb8356b09a3f9db22bb486d0089f9a9c90e9

    • SHA256

      6102cfa6e2ed28df49bb54a79020a7b686754fcba270d7397c3f61e74b3b1b70

    • SHA512

      97b6c99827a66468718616601faae1ccb75515a7a2649685b511d50f80c5589aba465553840875804c946e8c96c875b6a1349729c49b6130a9b7b36fd1759d76

    Score
    1/10
    • Target

      DISCOVER/COMPATBL/MULTSUPP/DX6.HTM

    • Size

      1KB

    • MD5

      c7325fb8cd14aaa0f6cff241a6fa4664

    • SHA1

      e57a3442974850eaadfc4694a15eea8e4053e6dd

    • SHA256

      5b703f3f4066fe9377875a4d99165c0e29c95d1396752d16a4745d6c702e88b6

    • SHA512

      2ccd102714aaa1ffe0bc362bdea90b135c9e669524808792aee821a525d8af69c046449f3fef9a73ac86733380f026cf6264a83bdae3f46050f76e9b222e549a

    Score
    1/10
    • Target

      DISCOVER/COMPATBL/MULTSUPP/IEEE1394.HTM

    • Size

      1KB

    • MD5

      de35a2ae0aed79b4085a4e2187c20fed

    • SHA1

      c39320278d8d027c4c8d8804b01898c5d12e27ff

    • SHA256

      c7d86ab877fc9c4964aa4c8e864475a273906d07843c16df1ec705dc10a6a2e6

    • SHA512

      320fe832fc95e9cc27a4338dd8849a6fef8410640a9d6485f567f741f3df393fdaf107fff2339153e59ec23055ac1d5dce0f65612630e3fe9d9365b05817a8c8

    Score
    1/10
    • Target

      DISCOVER/COMPATBL/MULTSUPP/IMAGEMAN.HTM

    • Size

      1KB

    • MD5

      b523666b0faecab7e38d21e346f3c846

    • SHA1

      d6d0d654649a3b68f2f3b8953addc40993f4ffbd

    • SHA256

      b88f7a3d5b7530511933547fe449db2ac6a561ba16cd99759672a34f3a92545d

    • SHA512

      ebc9801181d995b09154cdb6dae865570c39214503bec77290512854bbc50a98a6bd3b0ed87f5c1592237d75f00e22328c9df169dd28a16073b5d79f9122be65

    Score
    1/10
    • Target

      DISCOVER/COMPATBL/MULTSUPP/MULTMAIN.HTM

    • Size

      2KB

    • MD5

      e377f6e533486c034068435d6f0d9d63

    • SHA1

      7c06527a6350a75abbd129b001b253d65fa3b303

    • SHA256

      672ed198835c8ca9a75cd9081189bdd8269385ac57b1ece5ad1c7df4cdc1df9c

    • SHA512

      f928bdb041d560100181055fb082764730103175c1251b8a7abe4da1ac1aa86a0ed2bf2793f2aabddc9a7962ffb329b694e7e34876e8cefc81fea5142206b2cd

    Score
    6/10
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target

      DISCOVER/COMPATBL/MULTSUPP/MULTMON.HTM

    • Size

      1KB

    • MD5

      6664f197a604098c97b524622fcf8624

    • SHA1

      c4cc1e7ae0ce51e6b1bacc1a7d425ae2c173419e

    • SHA256

      c23b7626dae559f16ff82dcb32848deafd9d443100625c49200cacd35c38aee2

    • SHA512

      27b7e6ee6489680c3f2a71add71e3f1c01df3523dc8927e741481668d953e2d84ba96e294e6b9f6ee4ecf1618230bbfe99b4b2120e8ff64326adac1b541c2d66

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks