Overview

overview

8

Static

static

4

HwidPlus_Spoofer.exe

windows10-2004-x64

1

HwidPlus_Spoofer.exe

windows11-ltsc_2024-x64

1

hwidplus_patcher.dll

windows10-2004-x64

1

hwidplus_patcher.dll

windows11-ltsc_2024-x64

8

loader.exe

windows10-2004-x64

1

loader.exe

windows11-ltsc_2024-x64

1

minhook.x64.dll

windows10-2004-x64

1

minhook.x64.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    hwidplus-patcher.rar
  • Size 7.6MB
  • Sample260628-y3f6asd17l
  • SHA256 39107f95a4e64e4ed750fe47bcfa27e147c43babc44177d6b2221fc4866d333d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarecosturapackerpersistenceransomwarespyware

Malware Config

Targets

    • Target
      HwidPlus_Spoofer.exe
    • Size 97.3MB
    • SHA256 1997f2e50ef65185633e45e11e080264fb7091eae0ab21899b05ccc6b0b4a8aa
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    adwarespyware
    behavioral1behavioral2
    • Target
      hwidplus_patcher.dll
    • Size 115KB
    • SHA256 03512a0a0d6d32b59605289561ec1454c6fe2d5c746250f53619688acca4bd1c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral3behavioral4
    • Target
      loader.exe
    • Size 26KB
    • SHA256 7dae5ca66f358caeccd914754a2245f31d8d538cb7aa6a2fe8d3daf5d9e0f2d2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      minhook.x64.dll
    • Size 23KB
    • SHA256 36b8c1d0f48cf8fc9247f57c1c1556c64fca2e62445c2c08356b13978e94d871
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8

MITRE ATT&CK Enterprise v16

Tasks