629b51e9944762bae73948171c65d09a79595cf4c771a82ebc003fbba5b24f51

Sharing

Copy URL Twitter E-mail

General

Target
usbmmidd_v2.zip
Size 194KB
Sample260804-pjqqysba46
SHA256 629b51e9944762bae73948171c65d09a79595cf4c771a82ebc003fbba5b24f51
MD5 d282869544c02f34f09f0202e9c5dd9f
SHA1 477fad66342dc42c5b88681ba823f400f75fac49
SHA512 2013089cce010f2f1be46259722813cf51150d2f9a66d46d6be522a656dc4d0ede331323b24725b40ce803df19ec5a5052472b887fb2ed45173a7958cd24320d
SSDEEP 3072:OsBLxHK2MtFNrhz130iP/r6sPP+FBDYfq53GLWRT6vytRSlZv:ZBLxUdrhZ3V/esH+nSwRTUycZv
TLSH
T1E11412765B3A09E8B3940F31724CE3861030495988ADF532C16BE5D29DBE5CD97CBA4F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution

Malware Config

Targets

- Target
  usbmmidd_v2/Win32/usbmmIdd.dll
- Size 60KB
- SHA256 07ceebaecf203fef39117576d8b49d803c0fb1f6c7aa5175a6ebab110d54fed2
- MD5 35b4cd69a125d475a9456e0fe43b6514
- SHA1 71947900cf78c146a4cddd667bc3228390d429be
- SHA512 f02542203a5c992eabaf7cf6b706537128ffca85348f808bf6c897d8fba02087d7e8cdaf0a91329f8abde2148adf071eb967f47ececdb6a6f7c9f98fed11b730
- SSDEEP 768:cwVtOoQ+DUHe4TnqkgCQEpc6jpRaGRKgmU3deh9pKyRiopmilCjKfdsqQ2bx1CVu:ciZWqkg2cWsFRRRo4C74xk1t29
- TLSH
  T1DE538E22BEE044B3CF5A5A3074A6EE1B2E7D76815DF0C8676B6D830C1E75392771421B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1
- Target
  usbmmidd_v2/deviceinstaller.exe
- Size 139KB
- SHA256 918be90cccf70ccd20d42f564710335f1b6a7322ecef8e432737b6a4d2743a6c
- MD5 9dc576103b6c58580612c060310d5897
- SHA1 1f48037c5e17cb489a24221e3ba5a120d8a5850d
- SHA512 71cf06e711b3e408f599db3db9d795d4ebbf7d2d515fcc5f61bab97d9b54d4e7fead05ef247239d5bdab1dcbe180bb39ae7a6b08cab563bd54c13a81e07f1446
- SSDEEP 1536:5GSSEzaP6vDymVnGOBFmGRlxJjNJVCniTcjr/sWjcdc+hH7V1F7mF4O7WNI:oSSzP6bL7JjNJVLYrAc+dV1F7ARWNI
- TLSH
  T148D34F0273E58525F1F32A3069B456710E7BBCA1AE39CA4E6388515D0BF3E90DD74BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2 behavioral3
- Target
  usbmmidd_v2/deviceinstaller64.exe
- Size 158KB
- SHA256 e9baa02cdae921acf0aae4d8e8c29a4cdf4057ab61f9c60862b7cc439e2753f7
- MD5 41283e1240acfc163f0e697073f07413
- SHA1 a10cf33fbb23c4465921e6590c934873f3155317
- SHA512 d7361a1656c8a8bf0b2bb8fa332105912285d23933bbc37ebe955b36e3fc158472216757bd87638860542cefadbbc17d36d5ef16cbd910b64fc25a2d7f42cfaf
- SSDEEP 3072:MXiK11hTwS8XjJ3T/yub0koXAUthu3MA/KARW:MbillTK60koTQL
- TLSH
  T118F3810323E961A9F1F7BB3499B145219B777CA19A38D74D0298815E0FF3E809D39B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4 behavioral5
- Target
  usbmmidd_v2/usbmmidd.bat
- Size 306B
- SHA256 442f084b310de46ed9c70f64574fa79559554ea8931c92ee05f8ed7c8d8c0dfc
- MD5 bd43653a6ba586a0074798fc87238b71
- SHA1 62828f798cb57dfec4df99deda31d300a691de52
- SHA512 750c4ce9d2149e7aacb10e4ab06b62d03034c65b43da59536ac18f974763befa23dd38af74e5140ae8828c0df973c8e313143e30ec808da202f3ee331ab5e307
- TLSH
  T1BBE08616125F36BBBD43469B083D21658E1B984150BA17F123CF625A988305821636C5
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution
- Drops file in Drivers directory
- Drops file in System32 directory
behavioral6 behavioral7
- Target
  usbmmidd_v2/x64/usbmmIdd.dll
- Size 69KB
- SHA256 dc135d675127113915a7e5aa9fe57c84edad6be41d0890b265ef124ab26ea9e3
- MD5 ee848c427145609d998725a38e7ad9af
- SHA1 6b97d9ab1c3978cdc2d6735c227adca8f0aabddb
- SHA512 5bd0eca69d16a6fe32856978047967e44f0d49c59cd611b02e9d24ca59c0d862ad5f8a4d50c6bed816fa11e2f4fee6fabbe3d6d735224084f47161693eee8007
- SSDEEP 1536:fNgohwVuXUd9g0TOHISWaxVTYwZVtDEWoG:f32eSNOoSWMVVZVFYG
- TLSH
  T11B638D597BE448A1E46B9470C4E29E4FFAB1F1422F31969F0374C21D2F637E0A62D366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops file in Drivers directory

Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8