General

  • Target

    setup-X64.9.8.msi

  • Size

    85.0MB

  • Sample

    230810-njxc3aeb9s

  • MD5

    67fb4f3cb6b9642d6b78e10a554ac117

  • SHA1

    fa962ad66a79a1be9968ed9a11d81a25b35efcf6

  • SHA256

    245d9d08e4a9c76c432545aa5d78391fafa44ab7422367c4df81dab39a7482ef

  • SHA512

    c85549154ab4f0ca4d7df6fc431ba43de3a2191065e948af801cd36d391599e0ada0192225e2ef47f96d9ef92163fdcaf856d752a5e87b447424097e55f3af72

  • SSDEEP

    1572864:xCKa/mZuqQjEedsJ+XaawSQPPiDMHTuWvjkMv1CvrcokNArZC1JkQI7JrAjV:xCKZuqQAedskX1BQPPJ6WwwoKkomh7JE

Score
10/10

Malware Config

Targets

    • Target

      setup-X64.9.8.msi

    • Size

      85.0MB

    • MD5

      67fb4f3cb6b9642d6b78e10a554ac117

    • SHA1

      fa962ad66a79a1be9968ed9a11d81a25b35efcf6

    • SHA256

      245d9d08e4a9c76c432545aa5d78391fafa44ab7422367c4df81dab39a7482ef

    • SHA512

      c85549154ab4f0ca4d7df6fc431ba43de3a2191065e948af801cd36d391599e0ada0192225e2ef47f96d9ef92163fdcaf856d752a5e87b447424097e55f3af72

    • SSDEEP

      1572864:xCKa/mZuqQjEedsJ+XaawSQPPiDMHTuWvjkMv1CvrcokNArZC1JkQI7JrAjV:xCKZuqQAedskX1BQPPJ6WwwoKkomh7JE

    Score
    10/10
    • UAC bypass

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks