Overview

overview

7

Static

static

4

HwidPlus (...d).exe

windows10-2004-x64

7

HwidPlus (...d).exe

windows11-ltsc_2024-x64

1

HwidPlus (...l).exe

windows10-2004-x64

1

HwidPlus (...l).exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    HWIDPLUS-SPOOF.rar
  • Size 17.0MB
  • Sample260916-yfcvcsdc86
  • SHA256 b0fc31aa02b07fbd54206dfb615a7b4c66319b0686e905266ce9b361582e3620
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
costurapackerpersistenceprivilege_escalation

Malware Config

Targets

    • Target
      HwidPlus (Cracked).exe
    • Size 97.3MB
    • SHA256 a3ace2ed9e70890b0b02fbbbfdb70d65f681aee3c7fcba0355e2de3f4d940147
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    persistenceprivilege_escalation

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2
    • Target
      HwidPlus (orjinal).exe
    • Size 97.3MB
    • SHA256 1997f2e50ef65185633e45e11e080264fb7091eae0ab21899b05ccc6b0b4a8aa
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks