Resubmissions

23/04/2023, 01:29

230423-bwrxwsaa72 8

General

  • Target

    minecraft-demo.msi

  • Size

    1.9MB

  • Sample

    230423-bwrxwsaa72

  • MD5

    a5b7fb34e00b1467f73691a426a26eaa

  • SHA1

    d099cbf8ecb7d11141a023f741803fd9c7309daa

  • SHA256

    96481bdddf7d8b4f3a8a1de6622c2a6cd81d205a83bbf0974f9e683f14b72332

  • SHA512

    846c8b14587691d75f7735f92b8ba6134092b20a9406d485fd1e9b29dbabd1b46e227e53632c6ef91987261457a09d36c91ac5b7cba51975ba30370223fcfd61

  • SSDEEP

    24576:8cJF3UeXTBJemGNqLMor/oB2MsBVjVJfzjUnE0WTM9AudAUYvdjM40b:8cz1aQLVU2MsBVZJLF0WEb

Score
8/10

Malware Config

Targets

    • Target

      minecraft-demo.msi

    • Size

      1.9MB

    • MD5

      a5b7fb34e00b1467f73691a426a26eaa

    • SHA1

      d099cbf8ecb7d11141a023f741803fd9c7309daa

    • SHA256

      96481bdddf7d8b4f3a8a1de6622c2a6cd81d205a83bbf0974f9e683f14b72332

    • SHA512

      846c8b14587691d75f7735f92b8ba6134092b20a9406d485fd1e9b29dbabd1b46e227e53632c6ef91987261457a09d36c91ac5b7cba51975ba30370223fcfd61

    • SSDEEP

      24576:8cJF3UeXTBJemGNqLMor/oB2MsBVjVJfzjUnE0WTM9AudAUYvdjM40b:8cz1aQLVU2MsBVZJLF0WEb

    Score
    8/10
    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks