General

  • Target

    binary-waterfall.exe

  • Size

    81.2MB

  • Sample

    241227-xekyxaxqb1

  • MD5

    5a7df4114a38a6ecc0b59385806032f6

  • SHA1

    5110e095bcded742d91edb37a500c5fdf14696ba

  • SHA256

    b9a9d4b32be4a61fb9227e6af1d154de3677d77cafbffbe99bc250930a1048b9

  • SHA512

    1a1820185e4315d67dd0c4a959948c47aa740f46ccae7e0022e884482cd934da490c073e81f01427caef96f1edae105203cd6ed344a88cc111e3ab1a8b5e4cae

  • SSDEEP

    1572864:oXGMm4XR3b9CLmSCU/+eyglcmkirAH8+1osuTCSxOB6xMt32qHWB75iLOxnJ4xT:ogYRnSC++eywSS6xjKcBay2qHO5iixG

Malware Config

Targets

    • Target

      binary-waterfall.exe

    • Size

      81.2MB

    • MD5

      5a7df4114a38a6ecc0b59385806032f6

    • SHA1

      5110e095bcded742d91edb37a500c5fdf14696ba

    • SHA256

      b9a9d4b32be4a61fb9227e6af1d154de3677d77cafbffbe99bc250930a1048b9

    • SHA512

      1a1820185e4315d67dd0c4a959948c47aa740f46ccae7e0022e884482cd934da490c073e81f01427caef96f1edae105203cd6ed344a88cc111e3ab1a8b5e4cae

    • SSDEEP

      1572864:oXGMm4XR3b9CLmSCU/+eyglcmkirAH8+1osuTCSxOB6xMt32qHWB75iLOxnJ4xT:ogYRnSC++eywSS6xjKcBay2qHO5iixG

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks