General

  • Target

    e9c0fcf1b6dc4b895ed5ad5c4a6f3aeed343055584f7be6a478f525a27a56d8d.msi

  • Size

    4.0MB

  • Sample

    220111-z3xnqahcg6

  • MD5

    9c29559b0910132668be272b7228fb5b

  • SHA1

    57f3e22aba505bcc671d6b1ac54068c0cdead4b0

  • SHA256

    e9c0fcf1b6dc4b895ed5ad5c4a6f3aeed343055584f7be6a478f525a27a56d8d

  • SHA512

    143392c71a7cd435e454b79bdcb89c2388a6462111f87bac9118e2189792be24b9bd768f28a5d47042f1e984e133e83d8fc2e0f5dc65746e6a248f482814efde

Malware Config

Extracted

Family

latam_generic_downloader

C2

http://ec2-52-67-194-250.sa-east-1.compute.amazonaws.com/LG/A345465YTYEU5Y6876876898O8O0.zip

Targets

    • Target

      e9c0fcf1b6dc4b895ed5ad5c4a6f3aeed343055584f7be6a478f525a27a56d8d.msi

    • Size

      4.0MB

    • MD5

      9c29559b0910132668be272b7228fb5b

    • SHA1

      57f3e22aba505bcc671d6b1ac54068c0cdead4b0

    • SHA256

      e9c0fcf1b6dc4b895ed5ad5c4a6f3aeed343055584f7be6a478f525a27a56d8d

    • SHA512

      143392c71a7cd435e454b79bdcb89c2388a6462111f87bac9118e2189792be24b9bd768f28a5d47042f1e984e133e83d8fc2e0f5dc65746e6a248f482814efde

    Score
    8/10
    • Blocklisted process makes network request

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops startup file

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v6

Tasks