Resubmissions

26-02-2023 13:19

230226-qkjvgagg8v 8

13-01-2021 00:23

210113-581kxpr91j 6

General

  • Target

    HARMANPackagedBrowser_ActiveX.msi

  • Size

    10.9MB

  • Sample

    230226-qkjvgagg8v

  • MD5

    a17cd5079481c534a8181f8393659bfb

  • SHA1

    8e2d541806363c82545a0e7186e663c5272dde18

  • SHA256

    57df0e6dec62a251736b535fea20ada1dfe63833f9255f6f07e758eb08774c2b

  • SHA512

    9dbf83e25f47d9407263b781e4f5c283407d4ea75086018702e25e3ebf870c9d5d2fdf1ff7cf87a7effee82bc89a65ae017320c1799470b659d9acb58ff8e825

  • SSDEEP

    196608:YySLN8WyGzONGkoSahhDeLQ6KRKoU6xmFFbYuRaU7JdeIzVnidT/naz:YfLgGyNGSahALQ6KkrQmDTeIztena

Score
8/10

Malware Config

Targets

    • Target

      HARMANPackagedBrowser_ActiveX.msi

    • Size

      10.9MB

    • MD5

      a17cd5079481c534a8181f8393659bfb

    • SHA1

      8e2d541806363c82545a0e7186e663c5272dde18

    • SHA256

      57df0e6dec62a251736b535fea20ada1dfe63833f9255f6f07e758eb08774c2b

    • SHA512

      9dbf83e25f47d9407263b781e4f5c283407d4ea75086018702e25e3ebf870c9d5d2fdf1ff7cf87a7effee82bc89a65ae017320c1799470b659d9acb58ff8e825

    • SSDEEP

      196608:YySLN8WyGzONGkoSahhDeLQ6KRKoU6xmFFbYuRaU7JdeIzVnidT/naz:YfLgGyNGSahALQ6KkrQmDTeIztena

    Score
    8/10
    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v6

Tasks