a33e9a773fa7cbf1f8494b58c87480a4e9a88eadedab725918a07536fbb7cde8

Resubmissions

18/10/2023, 00:24

231018-ap3v5sac7z

17/02/2022, 06:58

220217-hrjjaabdgr8

Sharing

Copy URL Twitter E-mail

General

Target
Archivo.EndesaFactOn1702.msi
Size 263KB
Sample220217-hrjjaabdgr
SHA256 a33e9a773fa7cbf1f8494b58c87480a4e9a88eadedab725918a07536fbb7cde8
MD5 0f1278176d142c380e5bb4f59a2d6db0
SHA1 442a1f263af5043f11c40565a7d78f9bf65e96b9
SHA512 8a216f7e57f462ce1ae81bebacd40010bdc864cc28957b770fb6d8204d1552186688fd5c429edd96e07a3fde80b3821f068b2506d98048f1c377f0bfce369dba
MD5 SHA1 SHA512

Score

8^/10

persistence

Malware Config

Targets

- Target
  Archivo.EndesaFactOn1702.msi
- Size 263KB
- SHA256 a33e9a773fa7cbf1f8494b58c87480a4e9a88eadedab725918a07536fbb7cde8
- MD5 0f1278176d142c380e5bb4f59a2d6db0
- SHA1 442a1f263af5043f11c40565a7d78f9bf65e96b9
- SHA512 8a216f7e57f462ce1ae81bebacd40010bdc864cc28957b770fb6d8204d1552186688fd5c429edd96e07a3fde80b3821f068b2506d98048f1c377f0bfce369dba
- MD5 SHA1 SHA512
Score

8^/10

persistence
- Blocklisted process makes network request
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Blocklisted process makes network request

Executes dropped EXE

Loads dropped DLL

Adds Run key to start application

Enumerates connected drives

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2