Overview
overview
7Static
static
5SaNet.st.D....0.zip
windows10-2004-x64
7SaNet.st.D....0.zip
windows11-ltsc_2024-x64
1SaNet.st.D...DD.exe
windows10-2004-x64
1SaNet.st.D...DD.exe
windows11-ltsc_2024-x64
1SaNet.st.D...DD.exe
windows10-2004-x64
1SaNet.st.D...DD.exe
windows11-ltsc_2024-x64
1SaNet.st.D...in.exe
windows10-2004-x64
4SaNet.st.D...in.exe
windows11-ltsc_2024-x64
4General
- Target SaNet.st.Disk.Drill.Enterprise.6.3.1398.0.zip
- Size 60.6MB
- Sample261024-retyxsvthx
- SHA256 bf267acff6b64b53adb4fd99ee84bb85eb25e0b3000e8b6e1ae454246ba0f4d3
- MD5 258b4c96ad58bf533bf55d0059c5df54
- SHA1 b2581d4e6094ae8f4d1396d20f08cd85086d63ff
- SHA512 9c31a88f4a895e17133db863c2345cafcd159ef5c69cef6dd71a57421a9a7351e672575d451cd6e54ba01c2b23ded3d454531a159339ec35185126cc6a5c60ec
- SSDEEP 1572864:0vQsECqwThwNU+0DfwreEMEwVsSiw3xtqquBVqJAWnhZdhkAdlG1KWS:pcvHs6BKBVquWpRd0K9
- TLSH T1B1D733DF5AD03CC6FBB8DB36E62C6E041CD64A0DC0DB49DE9561E36F2622AE29714344
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
SaNet.st.Disk.Drill.Enterprise.6.3.1398.0.zip
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
SaNet.st.Disk.Drill.Enterprise.6.3.1398.0.zip
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
SaNet.st.Disk.Drill.Enterprise.6.3.1398.0/Crack UZ1/DD.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
SaNet.st.Disk.Drill.Enterprise.6.3.1398.0/Crack UZ1/DD.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
SaNet.st.Disk.Drill.Enterprise.6.3.1398.0/Crack UZ1/DD.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
SaNet.st.Disk.Drill.Enterprise.6.3.1398.0/Crack UZ1/DD.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
SaNet.st.Disk.Drill.Enterprise.6.3.1398.0/disk-drill-win.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
SaNet.st.Disk.Drill.Enterprise.6.3.1398.0/disk-drill-win.exe
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target SaNet.st.Disk.Drill.Enterprise.6.3.1398.0.zip
- Size 60.6MB
- SHA256 bf267acff6b64b53adb4fd99ee84bb85eb25e0b3000e8b6e1ae454246ba0f4d3
- MD5 258b4c96ad58bf533bf55d0059c5df54
- SHA1 b2581d4e6094ae8f4d1396d20f08cd85086d63ff
- SHA512 9c31a88f4a895e17133db863c2345cafcd159ef5c69cef6dd71a57421a9a7351e672575d451cd6e54ba01c2b23ded3d454531a159339ec35185126cc6a5c60ec
- SSDEEP 1572864:0vQsECqwThwNU+0DfwreEMEwVsSiw3xtqquBVqJAWnhZdhkAdlG1KWS:pcvHs6BKBVquWpRd0K9
- TLSH T1B1D733DF5AD03CC6FBB8DB36E62C6E041CD64A0DC0DB49DE9561E36F2622AE29714344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
-
- Target SaNet.st.Disk.Drill.Enterprise.6.3.1398.0/Crack UZ1/DD.dll
- Size 9.9MB
- SHA256 b5173243479cc80c1d8544ef8ca9e0c8c581daf49e83f23b3a782ee4af32d593
- MD5 2c8fdd779c1e9387284b212c4d129d90
- SHA1 ee97f4086620a5a8b544913f3ceb6479530f3b8b
- SHA512 ac0845c623be2ffa45d446e6e4331d82a67a3b6e2c4c13bfc10a3d6ec7b92e539d6ee33753f1f454b56a2f810f961e7bcf4cbe8b55a1887bec65c5a3283ac50b
- SSDEEP 196608:1FwZydILuHWBLyOlJXfAdl+26XU7jl+T2UhayOlJOvMG:vm/BL3Xf042EUv4qUha3OvM
- TLSH T185A6F11536A8D43EC06F4AB0D9A301181A74FC4667E19A5714FBBE0D3CF67828D29B9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target SaNet.st.Disk.Drill.Enterprise.6.3.1398.0/Crack UZ1/DD.exe
- Size 389KB
- SHA256 ef336831c4d12ef8fb98864ce90930941b92998c6284a104d6a7327b2afbe352
- MD5 621da4bb43610338a835f2d5dd5034b3
- SHA1 4d73c1c9798646c86e2ac3f9e13fb8d14021128c
- SHA512 04411772492e76158d1da63f7ed38a4d74acb1ac99780209ff7eaec49094bdbff20c79268b567e2f4bf95c7ad817606b158757ab505c99c051814c8f21dd892a
- SSDEEP 12288:BCgIrbvDm8mZTy9mg5qLbWelryGyNj8may:QiLZuog5hGryGyNj8may
- TLSH T1C6849E22F684117ED16AB535C4634D51BA723C5987709ACB07B27EBE3E2B2D09E38713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target SaNet.st.Disk.Drill.Enterprise.6.3.1398.0/disk-drill-win.exe
- Size 54.0MB
- SHA256 9bb6f0bdf474f8333f7567121296c983db145c3a67a0c23b92ff1f8a66a5e12f
- MD5 7f9487eaf5b2e641acde6f422b90c4ad
- SHA1 19ea70014c329d0c4725c346e167b138219e96d3
- SHA512 12d8512af95242ad783f0806798086af63bcf79444ca827d8cafcda923b3de39919784abede7886ed4aeb0d58b01a4973e9683c70f135bffe4c573211496fa99
- SSDEEP 1572864:UWMUZXtM+4zcBraoJ9V4s4I1wzMe2/nt5m3qfzCZtS6x:brDfb1wo3/uoz2SM
- TLSH T13BC733B623E028E6D6F98336E5548531BEB07D0D232244ABC5A5FD2D3F36A6125BF305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1