General

  • Target
    HiveMind_1_0_0_45.zip
  • Size 10.5MB
  • Sample260505-pewfmsfs91
  • SHA256 9e4d9e7d8d82fed196172408a5848132d71173bbf442c9c7e8ea22d34994ebd1
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      HiveMind_1_0_0_46.msi
    • Size 11.7MB
    • SHA256 63c99b222fae2241a88c8be381f152049c5f60a1be817e52b55693c754a59667
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Loads dropped DLL

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      setup.exe
    • Size 424KB
    • SHA256 7a68c7ce3c6b6203a71932318ae0ec5f3b128d6f41b7a35936069b55c3f2ef1c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks