General

  • Target
    Firmware.22.1.0.zip
  • Size 324.8MB
  • Sample260624-1dackafy8p
  • SHA256 d8cd72869a93cbf7b8e9ceaf135d8760f1ff8aaa001a2c0293210dc958d2fb34
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Firmware.22.1.0.zip
    • Size 324.8MB
    • SHA256 d8cd72869a93cbf7b8e9ceaf135d8760f1ff8aaa001a2c0293210dc958d2fb34
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      001d8d5a7fe8d0cbd148ff67d3b830a1.nca
    • Size 1.2MB
    • SHA256 001d8d5a7fe8d0cbd148ff67d3b830a16308ec0a4f14be601686f6494e1294bc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      00c00013ca5346577e30870b5294c31f.cnmt.nca
    • Size 3KB
    • SHA256 00c00013ca5346577e30870b5294c31f52b973477299802cc26a1ae7f212d65d
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      00d460df4a07b37c6a39c3eb7187f771.nca
    • Size 179KB
    • SHA256 00d460df4a07b37c6a39c3eb7187f7712c141e9f6ea9e9f87dcbffd6efbc76d4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      015531c2279f834e48500eb0c2a5f8c1.cnmt.nca
    • Size 3KB
    • SHA256 015531c2279f834e48500eb0c2a5f8c135a43e12db7136143869907bc49c9b63
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      015c2cf2965610293715e2ad330f6f94.cnmt.nca
    • Size 3KB
    • SHA256 015c2cf2965610293715e2ad330f6f94b52f62b2d80bb651d968a66543053c49
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      022f472c66aa4d3a0ada801ec0f2650b.cnmt.nca
    • Size 3KB
    • SHA256 022f472c66aa4d3a0ada801ec0f2650b006b75c2357629287a8f97ab3c05c725
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      03e9f7441faea200b14646c32c019c19.nca
    • Size 258KB
    • SHA256 03e9f7441faea200b14646c32c019c194ad9f04d4efa4cee31144b0c31ff2be5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      08aeb001da384efaf891a8d3af186a5c.nca
    • Size 157KB
    • SHA256 08aeb001da384efaf891a8d3af186a5c0ba660e3eeff4e5a9e30cf6c12522b1a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      097040afca3d34fa69dd6d738cdc5119.nca
    • Size 349KB
    • SHA256 097040afca3d34fa69dd6d738cdc51197e3d9987932bdd45480f9211a1288850
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      09f2e9c7f15084e2caf6b2e073dd7e54.cnmt.nca
    • Size 3KB
    • SHA256 09f2e9c7f15084e2caf6b2e073dd7e54a97e46dd94cd85864ef7e0ca954fdcac
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      0afdafecbf4bbc9ff67ab9930a0520f8.nca
    • Size 766KB
    • SHA256 0afdafecbf4bbc9ff67ab9930a0520f82e1c3bf3ded6f45fde128b55b3892001
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      0b4e1f6006232d882fd31c08d73b95b1.cnmt.nca
    • Size 3KB
    • SHA256 0b4e1f6006232d882fd31c08d73b95b1622ae0fc962832c984bbab881faa332e
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      0bb5d66fd0fc610f4c3d70d6b8f69633.cnmt.nca
    • Size 3KB
    • SHA256 0bb5d66fd0fc610f4c3d70d6b8f696332349443f456feab2173b1c265edabd6e
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      0cf95a44b4b0b70c6d37477909f3c529.cnmt.nca
    • Size 3KB
    • SHA256 0cf95a44b4b0b70c6d37477909f3c529b02afb0692064e640d428611eb3c1d29
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      0d2516ac51a57f1cb4e140810df18ba8.nca
    • Size 242KB
    • SHA256 0d2516ac51a57f1cb4e140810df18ba82eae77c4f457be4b5c4c5fc317c63cc5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
1/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
3/10

behavioral4

adwarepersistenceransomwarespyware
Score
8/10

behavioral5

Score
3/10

behavioral6

adwarepersistenceransomwarespyware
Score
8/10

behavioral7

Score
3/10

behavioral8

adwarepersistenceransomwarespyware
Score
8/10

behavioral9

Score
3/10

behavioral10

Score
3/10

behavioral11

Score
3/10

behavioral12

Score
3/10

behavioral13

Score
3/10

behavioral14

Score
3/10

behavioral15

Score
3/10

behavioral16

Score
3/10

behavioral17

Score
3/10

behavioral18

Score
3/10

behavioral19

Score
3/10

behavioral20

Score
3/10

behavioral21

Score
3/10

behavioral22

Score
3/10

behavioral23

Score
3/10

behavioral24

adwarepersistenceransomwarespyware
Score
8/10

behavioral25

Score
3/10

behavioral26

Score
3/10

behavioral27

Score
3/10

behavioral28

adwarepersistenceransomwarespyware
Score
8/10

behavioral29

Score
3/10

behavioral30

Score
3/10

behavioral31

Score
3/10

behavioral32

Score
3/10