Overview

overview

8

Static

static

3

Dramatic/VoidCoD.exe

windows10-2004-x64

6

Dramatic/VoidCoD.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

  • Target
    Dramatic.rar
  • Size 1.3MB
  • Sample260702-e42zlsbx7v
  • SHA256 67f50982e1534135f2fdeb52d46c043ec5d082556494dce2f4ef266632970da5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasion

Malware Config

Targets

    • Target
      Dramatic/VoidCoD.exe
    • Size 2.2MB
    • SHA256 60873671ceb7ec6fafa8ccd9480a10ac08dc642d9aee690c69464d354ab045e5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    defense_evasion

    • Modify Registry: Disable Windows Driver Blocklist

      Disable Windows Driver Blocklist via Registry.

      defense_evasion

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks