Overview

overview

8

Static

static

1

TempestInstaller.exe

windows7-x64

7

TempestInstaller.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    TempestInstaller.exe

  • Size

    1.1MB

  • Sample

    230421-1fpj9sbh9t

  • MD5

    3b4f91cf17c5a7103cadade86103ded4

  • SHA1

    8b68c3ae0e72f9df6e85a7f3190cd4c90118dfae

  • SHA256

    6555157bb9e6251465840fad7856f63b123189f738008ce200449f3f97978d5f

  • SHA512

    405534639b564df5911edff0b99b4e6af994854d7591fb1ae301306b49978c9992e514a09e113ba7d0ad9264e4d293fba987a10550b6228ce44954966bc5b53b

  • SSDEEP

    24576:3gFyHJHShoQX7dmy8qfEL1J0n2zo68A25V3EBtR6Zu6BUX1QhNxWTzcHJmWb:3gYNBMhmTqQ1Lzo6uDe679JHJmWb

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      TempestInstaller.exe

    • Size

      1.1MB

    • MD5

      3b4f91cf17c5a7103cadade86103ded4

    • SHA1

      8b68c3ae0e72f9df6e85a7f3190cd4c90118dfae

    • SHA256

      6555157bb9e6251465840fad7856f63b123189f738008ce200449f3f97978d5f

    • SHA512

      405534639b564df5911edff0b99b4e6af994854d7591fb1ae301306b49978c9992e514a09e113ba7d0ad9264e4d293fba987a10550b6228ce44954966bc5b53b

    • SSDEEP

      24576:3gFyHJHShoQX7dmy8qfEL1J0n2zo68A25V3EBtR6Zu6BUX1QhNxWTzcHJmWb:3gYNBMhmTqQ1Lzo6uDe679JHJmWb

    Score
    8/10
    discoverypersistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks