General
-
Target
setup-X64.9.8.msi
-
Size
85.0MB
-
Sample
230810-njxc3aeb9s
-
MD5
67fb4f3cb6b9642d6b78e10a554ac117
-
SHA1
fa962ad66a79a1be9968ed9a11d81a25b35efcf6
-
SHA256
245d9d08e4a9c76c432545aa5d78391fafa44ab7422367c4df81dab39a7482ef
-
SHA512
c85549154ab4f0ca4d7df6fc431ba43de3a2191065e948af801cd36d391599e0ada0192225e2ef47f96d9ef92163fdcaf856d752a5e87b447424097e55f3af72
-
SSDEEP
1572864:xCKa/mZuqQjEedsJ+XaawSQPPiDMHTuWvjkMv1CvrcokNArZC1JkQI7JrAjV:xCKZuqQAedskX1BQPPJ6WwwoKkomh7JE
Static task
static1
Malware Config
Targets
-
-
Target
setup-X64.9.8.msi
-
Size
85.0MB
-
MD5
67fb4f3cb6b9642d6b78e10a554ac117
-
SHA1
fa962ad66a79a1be9968ed9a11d81a25b35efcf6
-
SHA256
245d9d08e4a9c76c432545aa5d78391fafa44ab7422367c4df81dab39a7482ef
-
SHA512
c85549154ab4f0ca4d7df6fc431ba43de3a2191065e948af801cd36d391599e0ada0192225e2ef47f96d9ef92163fdcaf856d752a5e87b447424097e55f3af72
-
SSDEEP
1572864:xCKa/mZuqQjEedsJ+XaawSQPPiDMHTuWvjkMv1CvrcokNArZC1JkQI7JrAjV:xCKZuqQAedskX1BQPPJ6WwwoKkomh7JE
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
1