Overview

overview

10

Static

static

SCAN-016063.pdf.msi

windows7_x64

10

SCAN-016063.pdf.msi

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SCAN-016063.pdf.msi

  • Size

    224KB

  • Sample

    220630-tns44acdhk

  • MD5

    ff82937564ff59eb6207f079cdc8e43d

  • SHA1

    7cfe0a71c4a2508a1af80e640ec8b1b034edb604

  • SHA256

    face46e6593206867da39e47001f134a00385898a36b8142a21ad54954682666

  • SHA512

    4c4c2f59ef157de6570bf16daff958d9ccdafd8ba6cf3f946cabaa413c085c05242b2499552e789f0f0bc9e1cbf0b74ec6327340d29c80a694aeddf444788ee1

Score
10/10
matanbuchusloader

Malware Config

Targets

    • Target

      SCAN-016063.pdf.msi

    • Size

      224KB

    • MD5

      ff82937564ff59eb6207f079cdc8e43d

    • SHA1

      7cfe0a71c4a2508a1af80e640ec8b1b034edb604

    • SHA256

      face46e6593206867da39e47001f134a00385898a36b8142a21ad54954682666

    • SHA512

      4c4c2f59ef157de6570bf16daff958d9ccdafd8ba6cf3f946cabaa413c085c05242b2499552e789f0f0bc9e1cbf0b74ec6327340d29c80a694aeddf444788ee1

    Score
    10/10
    matanbuchusloader

    • Matanbuchus

      A loader sold as MaaS first seen in February 2021.

      loadermatanbuchus

    • Blocklisted process makes network request

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks