General
- Target HDClone.exe
- Size 58.1MB
- Sample260620-a6lcescw6p
- SHA256 d7ac87c4ad802e4d231e9482ef488685d6f02cbcc3e8993b9c7b4d4e91da7167
- MD5 1c5641a54d9470c86ca2be7beae72abf
- SHA1 eb383245d8e39d496404dc8206eae8af25783b7e
- SHA512 cbeb551e03426525cf86a4bbb6289fecb205e508529116580dee10762e6ea078cb2c8f35d69af85d4044f031ba8df78074fd35c57148e4ce26f3eae1b09d54de
- SSDEEP 1572864:B/+M/9XR8RuH8eMf+mKGKO9ZqXhkpGTgNvUomCM:BL/9B8VeMdK5XaYUUpCM
- TLSH T180D7120657D4F4EDC0A68131C54A87F6F772FC16D6A1A30B64B87E263FB3A504E2A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
HDClone.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
HDClone.exe
Resource
win11ltsc2024-20260617-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target HDClone.exe
- Size 58.1MB
- SHA256 d7ac87c4ad802e4d231e9482ef488685d6f02cbcc3e8993b9c7b4d4e91da7167
- MD5 1c5641a54d9470c86ca2be7beae72abf
- SHA1 eb383245d8e39d496404dc8206eae8af25783b7e
- SHA512 cbeb551e03426525cf86a4bbb6289fecb205e508529116580dee10762e6ea078cb2c8f35d69af85d4044f031ba8df78074fd35c57148e4ce26f3eae1b09d54de
- SSDEEP 1572864:B/+M/9XR8RuH8eMf+mKGKO9ZqXhkpGTgNvUomCM:BL/9B8VeMdK5XaYUUpCM
- TLSH T180D7120657D4F4EDC0A68131C54A87F6F772FC16D6A1A30B64B87E263FB3A504E2A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.