General

  • Target

    Universal CRT Tools x64-x64_en-us.msi

  • Size

    284KB

  • Sample

    230722-2phzhscf39

  • MD5

    d25ab6b49f3ac5f4439d62c189c4cff3

  • SHA1

    dd16916a8eb4eff534214f89d07a2b3b5b62484a

  • SHA256

    807eafc854de10fce0e1d07961694beeeab8a964d0d62cd34db456741f43d7fd

  • SHA512

    790ade736868be0274dba5a8a811a0e3f9bf6ab8eb426e88d4dacc283af9d75e9bc125f885fa04505685f54babb25a407230fdf9fbcb5e44697e07a44980db43

  • SSDEEP

    3072:Zo0VjueHwzvcXcSqviseCIng2NmGKz5FpgVs9MnnwuOoAACgv5G/CDnUbwzsP:Zd6vcXgvi1RmGKtFpgVcIwwApgc/o

Score
8/10

Malware Config

Targets

    • Target

      Universal CRT Tools x64-x64_en-us.msi

    • Size

      284KB

    • MD5

      d25ab6b49f3ac5f4439d62c189c4cff3

    • SHA1

      dd16916a8eb4eff534214f89d07a2b3b5b62484a

    • SHA256

      807eafc854de10fce0e1d07961694beeeab8a964d0d62cd34db456741f43d7fd

    • SHA512

      790ade736868be0274dba5a8a811a0e3f9bf6ab8eb426e88d4dacc283af9d75e9bc125f885fa04505685f54babb25a407230fdf9fbcb5e44697e07a44980db43

    • SSDEEP

      3072:Zo0VjueHwzvcXcSqviseCIng2NmGKz5FpgVs9MnnwuOoAACgv5G/CDnUbwzsP:Zd6vcXgvi1RmGKtFpgVcIwwApgc/o

    Score
    8/10
    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks