General
- Target Release.zip
- Size 2.8MB
- Sample260703-e1v2wsgs6r
- SHA256 f9f3ac28e7def75df3775400f8d89ad52697a4baa6f462a7a5027783dae12565
Malware Config
Targets
-
- Target DLLs/DiddyWare2010.dll
- Size 21KB
- SHA256 978df3599cf93018a42de32032ac5cd7166b11e7b4ecc8403ae327fe7f2d4df8
Score5/10-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
- Target DLLs/DiddyWare2011.dll
- Size 21KB
- SHA256 a255b9745aab12385bb2c52e4310fadca873a9c070e231bfe1ab2af5f087e59d
Score5/10-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
- Target DLLs/DiddyWare2012.dll
- Size 21KB
- SHA256 390cff4555b5e6eff6b3c7ce246c20925ef9cb513e5b3a92f54623938b0c0f77
Score5/10-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
- Target DLLs/DiddyWare2013.dll
- Size 21KB
- SHA256 b2cce3486ac087992486351e92fef85b5d83f99b49b63cc5caddacefc90cdd2b
Score5/10-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
- Target DLLs/DiddyWare2014.dll
- Size 21KB
- SHA256 0b4560aaffe89cc48ca1f2f696c9694700daf43e04f1d57ca93115672385b275
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
- Target DLLs/DiddyWare2014E.dll
- Size 74KB
- SHA256 1e73afa4afa2c1f51c04725b8635e6f4cab24cc47186547aee1024a05f6935e2
Score3/10 -
- Target DLLs/DiddyWare2014M.dll
- Size 74KB
- SHA256 71678f9ed7799863ed32d980f300146dbf1f72fa90231e68b69a819134890510
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target DLLs/DiddyWare2020L.dll
- Size 427KB
- SHA256 0b93220db04f21d2bd7608d08640bcf37b64a949c437f747bb330e081df6eb5a
Score5/10-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
- Target DLLs/DiddyWare2021M.dll
- Size 421KB
- SHA256 8ad15bd82f0d4e5046d35400bc9d4549108a1bfab5712b5e0ee645d5e3408189
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target DLLs/DiddyWarePolytoria.dll
- Size 254KB
- SHA256 aadd2070be741aec9091fcd8eb807568d40dd68f963d3b2088ae139851df967d
Score1/10 -
- Target DLLs/DiddyWareSynt2x2012.dll
- Size 74KB
- SHA256 ef805dbc3b90ea746423c4ac51c70947d4a2ce01726cd6c47b722b4489dd588a
Score3/10 -
- Target DLLs/DiddyWareSynt2x2014.dll
- Size 74KB
- SHA256 7cfa693e80ab99c8720e5242c731a076225b250e9df498aae23269ebf79cac9d
Score3/10 -
- Target DLLs/Injector.exe
- Size 144KB
- SHA256 2e85acd6bc5a03287dae1da05989720e97b24dde4ece2a6a9ec5b8ad7c9c5ff3
Score1/10 -
- Target DLLs/Injector64.exe
- Size 141KB
- SHA256 99ec069e47172d361067c0437c8eb242f7e22ed812399529721b22d0ceb18a7a
Score1/10 -
- Target Monaco/Monaco.html
- Size 6KB
- SHA256 1ecdd9529ef5487f92736894d94ff680f6c32ee821615d29c0fc814f3a310b4a
Score4/10 -
- Target Monaco/vs/base/worker/workerMain.js
- Size 149KB
- SHA256 bdf9433692a08851e13dd58504eef19f51bd2ec7241923a68edf5772e0e53af5
Score3/10