Overview

overview

8

Static

static

10

73f1227353...fa.msi

windows7_x64

8

73f1227353...fa.msi

windows10_x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    73f1227353bf94e9e829088b81cd25fa
  • Size 263KB
  • Sample210930-ss3nnaaae9
  • SHA256 36417eb2ecdbb537b9679f959a8ab356e954f1a1ae200a360f7fed963c8d04e2
  • MD5 SHA1 SHA512
Score
10/10
latam_generic_downloaderpersistence

Malware Config

Extracted

Family

  • latam_generic_downloader

C2

  • https://fmwaretzb.s3.sa-east-1.amazonaws.com/smart.max

Targets

    • Target
      73f1227353bf94e9e829088b81cd25fa
    • Size 263KB
    • SHA256 36417eb2ecdbb537b9679f959a8ab356e954f1a1ae200a360f7fed963c8d04e2
    • MD5 SHA1 SHA512
    Score
    8/10
    persistence

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks