Overview

overview

8

Static

static

10

b9e49c59ff...b2.msi

windows7_x64

8

b9e49c59ff...b2.msi

windows10_x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    b9e49c59ff734f7bdb5f4cc35b1d8bb2.msi
  • Size 264KB
  • Sample211123-smbyraadgr
  • SHA256 fedd8610da159a593c56d0685ce7d579beaab9ccf00487a980ae9b6bf9ff743c
  • MD5 SHA1 SHA512
Score
10/10
latam_generic_downloader

Malware Config

Extracted

Family

  • latam_generic_downloader

C2

  • http://45.56.85.218//HgT.dump

Targets

    • Target
      b9e49c59ff734f7bdb5f4cc35b1d8bb2.msi
    • Size 264KB
    • SHA256 fedd8610da159a593c56d0685ce7d579beaab9ccf00487a980ae9b6bf9ff743c
    • MD5 SHA1 SHA512
    Score
    8/10

    • Blocklisted process makes network request

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks