bf267acff6b64b53adb4fd99ee84bb85eb25e0b3000e8b6e1ae454246ba0f4d3

Resubmissions

24/10/2026, 14:11

261024-rhfkpscs5j8

24/10/2026, 14:06

24/10/2026, 13:43

24/10/2026, 13:39

24/10/2026, 13:35

Sharing

Copy URL Twitter E-mail

General

Target
SaNet.st.Disk.Drill.Enterprise.6.3.1398.0.zip
Size 60.6MB
Sample261024-rhfkpscs5j
SHA256 bf267acff6b64b53adb4fd99ee84bb85eb25e0b3000e8b6e1ae454246ba0f4d3
MD5 258b4c96ad58bf533bf55d0059c5df54
SHA1 b2581d4e6094ae8f4d1396d20f08cd85086d63ff
SHA512 9c31a88f4a895e17133db863c2345cafcd159ef5c69cef6dd71a57421a9a7351e672575d451cd6e54ba01c2b23ded3d454531a159339ec35185126cc6a5c60ec
SSDEEP 1572864:0vQsECqwThwNU+0DfwreEMEwVsSiw3xtqquBVqJAWnhZdhkAdlG1KWS:pcvHs6BKBVquWpRd0K9
TLSH
T1B1D733DF5AD03CC6FBB8DB36E62C6E041CD64A0DC0DB49DE9561E36F2622AE29714344
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  SaNet.st.Disk.Drill.Enterprise.6.3.1398.0.zip
- Size 60.6MB
- SHA256 bf267acff6b64b53adb4fd99ee84bb85eb25e0b3000e8b6e1ae454246ba0f4d3
- MD5 258b4c96ad58bf533bf55d0059c5df54
- SHA1 b2581d4e6094ae8f4d1396d20f08cd85086d63ff
- SHA512 9c31a88f4a895e17133db863c2345cafcd159ef5c69cef6dd71a57421a9a7351e672575d451cd6e54ba01c2b23ded3d454531a159339ec35185126cc6a5c60ec
- SSDEEP 1572864:0vQsECqwThwNU+0DfwreEMEwVsSiw3xtqquBVqJAWnhZdhkAdlG1KWS:pcvHs6BKBVquWpRd0K9
- TLSH
  T1B1D733DF5AD03CC6FBB8DB36E62C6E041CD64A0DC0DB49DE9561E36F2622AE29714344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware bootkit defense_evasion discovery persistence spyware trojan
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  SaNet.st.Disk.Drill.Enterprise.6.3.1398.0/Crack UZ1/DD.dll
- Size 9.9MB
- SHA256 b5173243479cc80c1d8544ef8ca9e0c8c581daf49e83f23b3a782ee4af32d593
- MD5 2c8fdd779c1e9387284b212c4d129d90
- SHA1 ee97f4086620a5a8b544913f3ceb6479530f3b8b
- SHA512 ac0845c623be2ffa45d446e6e4331d82a67a3b6e2c4c13bfc10a3d6ec7b92e539d6ee33753f1f454b56a2f810f961e7bcf4cbe8b55a1887bec65c5a3283ac50b
- SSDEEP 196608:1FwZydILuHWBLyOlJXfAdl+26XU7jl+T2UhayOlJOvMG:vm/BL3Xf042EUv4qUha3OvM
- TLSH
  T185A6F11536A8D43EC06F4AB0D9A301181A74FC4667E19A5714FBBE0D3CF67828D29B9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  SaNet.st.Disk.Drill.Enterprise.6.3.1398.0/Crack UZ1/DD.exe
- Size 389KB
- SHA256 ef336831c4d12ef8fb98864ce90930941b92998c6284a104d6a7327b2afbe352
- MD5 621da4bb43610338a835f2d5dd5034b3
- SHA1 4d73c1c9798646c86e2ac3f9e13fb8d14021128c
- SHA512 04411772492e76158d1da63f7ed38a4d74acb1ac99780209ff7eaec49094bdbff20c79268b567e2f4bf95c7ad817606b158757ab505c99c051814c8f21dd892a
- SSDEEP 12288:BCgIrbvDm8mZTy9mg5qLbWelryGyNj8may:QiLZuog5hGryGyNj8may
- TLSH
  T1C6849E22F684117ED16AB535C4634D51BA723C5987709ACB07B27EBE3E2B2D09E38713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  SaNet.st.Disk.Drill.Enterprise.6.3.1398.0/disk-drill-win.exe
- Size 54.0MB
- SHA256 9bb6f0bdf474f8333f7567121296c983db145c3a67a0c23b92ff1f8a66a5e12f
- MD5 7f9487eaf5b2e641acde6f422b90c4ad
- SHA1 19ea70014c329d0c4725c346e167b138219e96d3
- SHA512 12d8512af95242ad783f0806798086af63bcf79444ca827d8cafcda923b3de39919784abede7886ed4aeb0d58b01a4973e9683c70f135bffe4c573211496fa99
- SSDEEP 1572864:UWMUZXtM+4zcBraoJ9V4s4I1wzMe2/nt5m3qfzCZtS6x:brDfb1wo3/uoz2SM
- TLSH
  T13BC733B623E028E6D6F98336E5548531BEB07D0D232244ABC5A5FD2D3F36A6125BF305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8