General
-
Target
Dynatrace-ActiveGate-Windows-x86-1.259.307 (1).exe
-
Size
175.2MB
-
Sample
230314-m4y7qafa54
-
MD5
e773a16dcc4fd0290f5513522ac39a8a
-
SHA1
3e977985facfde8cccef25ca90baccb6d1823171
-
SHA256
ee6e571843b3944f0a32ef22acd34daead0413de7ee5d0d42567aed6f4a9e6eb
-
SHA512
6f7306c12aa4113644b705b51fdc6470ae6da1b1e94ce0dd5d0b39a51519a964371052143eb32f97b26fcf9fa8577b7f74648fb97ce61a42f70db0b31a6b098e
-
SSDEEP
3145728:lCV3GR+FBGWiMXGQOXOR0SW+EX+O/xs7s4tC9/Og4ZLhfAIoQ:Z4TiM4XOR0swItOOgOFfAIh
Static task
static1
Behavioral task
behavioral1
Sample
Dynatrace-ActiveGate-Windows-x86-1.259.307 (1).exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
Dynatrace-ActiveGate-Windows-x86-1.259.307 (1).exe
-
Size
175.2MB
-
MD5
e773a16dcc4fd0290f5513522ac39a8a
-
SHA1
3e977985facfde8cccef25ca90baccb6d1823171
-
SHA256
ee6e571843b3944f0a32ef22acd34daead0413de7ee5d0d42567aed6f4a9e6eb
-
SHA512
6f7306c12aa4113644b705b51fdc6470ae6da1b1e94ce0dd5d0b39a51519a964371052143eb32f97b26fcf9fa8577b7f74648fb97ce61a42f70db0b31a6b098e
-
SSDEEP
3145728:lCV3GR+FBGWiMXGQOXOR0SW+EX+O/xs7s4tC9/Og4ZLhfAIoQ:Z4TiM4XOR0swItOOgOFfAIh
Score8/10-
Blocklisted process makes network request
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-