Overview

overview

8

Static

static

1

Your File ...ad.msi

windows7-x64

8

Your File ...ad.msi

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    Your File Is Ready To Download.msi.7z

  • Size

    155.8MB

  • Sample

    230712-xek9nsed36

  • MD5

    aab6d6a34ab5929d87c3f23f66610265

  • SHA1

    b7a99526051dd9e3f5b64eb80cdeeda5b4e78807

  • SHA256

    f51e2e942bcd9b2e9622c09bcd39a4cb9e7d9f386d201b0f0b9e3f58eed04f5b

  • SHA512

    5fb17976cefe940d19294928980a5341f55c694a2b568fb03bedb92a3041258a6259efe52c9c4c510f1164ed0f300204860d99b58b2b6681bf371f20b95a11eb

  • SSDEEP

    3145728:UQgm6yY+VDhfr1iN0Ka8896qrsNzmx/mXQ0CEqLdsabS4INQ3V:Utm6uIaX96W5xgQ553V

Score
8/10

Malware Config

Targets

    • Target

      Your File Is Ready To Download.msi

    • Size

      160.9MB

    • MD5

      4f1aa146362948190a272b81b4f6117f

    • SHA1

      c76d1aa5a44658674c3101fc07a1919a6d07ad76

    • SHA256

      f2851f887983bdba9ad32179dab5e9a38ec3e3d601c886ab902b5476f46bb602

    • SHA512

      f934c45ee4e6fe828c767eeec20406afe7575f720fa09c9418266a11821c9e463966d66eb509b45434e860c9ba519d2f03b05d64976eb3af4666b770454808c6

    • SSDEEP

      3145728:UMbqRRZjtQwYcDjEKvGJ8Z9UgBDiOQw+/mi+B5U8w7ldUmYX6rhJ:UCqm0oiG2+LXT/m/c9ZymSqhJ

    Score
    8/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks