ce41f7c712e0113700f0f3653868200af041f3e170f45dacc6d6e3542ab91062 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce41f7c712e0113700f0f3653868200af041f3e170f45dacc6d6e3542ab91062.msi
Size

2.5MB
Sample

221017-q6z4kscac2
MD5

6079271f8d2142126ddb00715a0cd930
SHA1

a0ddfab827fbc0b63ceed7ae2331c22aa872a0fd
SHA256

ce41f7c712e0113700f0f3653868200af041f3e170f45dacc6d6e3542ab91062
SHA512

cffb409cd4dab8f4ed7e59da063372522f12d1c4ad30a101301119d84b72e599ee08f8bb14ef32dd2371dbf2e8e1e6f921e480b19f29c96908eeefcaab176d0a
SSDEEP

49152:8fAY5A2w2yuYYTr8tAPMZzEncUDyP567SAZhAjANVb7G01WG3kakAFxRK:/Y5AE8GAUAsr//7U

Score

8^/10

Malware Config

Targets

- Target
  
  ce41f7c712e0113700f0f3653868200af041f3e170f45dacc6d6e3542ab91062.msi
- Size
  
  2.5MB
- MD5
  
  6079271f8d2142126ddb00715a0cd930
- SHA1
  
  a0ddfab827fbc0b63ceed7ae2331c22aa872a0fd
- SHA256
  
  ce41f7c712e0113700f0f3653868200af041f3e170f45dacc6d6e3542ab91062
- SHA512
  
  cffb409cd4dab8f4ed7e59da063372522f12d1c4ad30a101301119d84b72e599ee08f8bb14ef32dd2371dbf2e8e1e6f921e480b19f29c96908eeefcaab176d0a
- SSDEEP
  
  49152:8fAY5A2w2yuYYTr8tAPMZzEncUDyP567SAZhAjANVb7G01WG3kakAFxRK:/Y5AE8GAUAsr//7U
Score

8^/10
- Blocklisted process makes network request
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2