General

  • Target

    5e03e0adf5386298a28825048228a81a14ecd40981a34a7c0b04a4b581425649

  • Size

    207KB

  • Sample

    241016-z3pywatanh

  • MD5

    4414f47cff1983e5a62c0fdfa9f69194

  • SHA1

    5b8eeaf0753863a7a4cf0cc5aa6e1e3301733691

  • SHA256

    5e03e0adf5386298a28825048228a81a14ecd40981a34a7c0b04a4b581425649

  • SHA512

    cb98af19dab9b614bb2807141b51d986ef161e4f5839fa46d7c054b22b869d89c90e265e2f6ad3a1018258fb9ba90829a425793fceea47a040bdba81c5c3beb0

  • SSDEEP

    3072:LZipq+BgM2OWVWE7XGcjN9iZm9GcFP1H5HLOIc1h3SubM3GkQXfexsj:EpbaeyWECcp9AcFJ5qIU4QXfos

Malware Config

Targets

    • Target

      5e03e0adf5386298a28825048228a81a14ecd40981a34a7c0b04a4b581425649

    • Size

      207KB

    • MD5

      4414f47cff1983e5a62c0fdfa9f69194

    • SHA1

      5b8eeaf0753863a7a4cf0cc5aa6e1e3301733691

    • SHA256

      5e03e0adf5386298a28825048228a81a14ecd40981a34a7c0b04a4b581425649

    • SHA512

      cb98af19dab9b614bb2807141b51d986ef161e4f5839fa46d7c054b22b869d89c90e265e2f6ad3a1018258fb9ba90829a425793fceea47a040bdba81c5c3beb0

    • SSDEEP

      3072:LZipq+BgM2OWVWE7XGcjN9iZm9GcFP1H5HLOIc1h3SubM3GkQXfexsj:EpbaeyWECcp9AcFJ5qIU4QXfos

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks