General

  • Target

    zabbix_agent-6.0.21-windows-amd64-openssl.msi

  • Size

    6.7MB

  • Sample

    231002-kqvw2aab75

  • MD5

    ec054839fb80a3be1e94412b18315664

  • SHA1

    6033d5e793a7f070caa23d06af78fb30494bf92e

  • SHA256

    44d3ac3c6fcf3d8d81478df6fa73799f19143df99f2216fea7e5ab4adb2f1611

  • SHA512

    062ae9c2017ce8db1fc2521e1d3ed3693c55a04bf6bfc4f97d968095c90b237bb697670ba5c3ae9a2cf1e87e9a73f652dd93eb519c22abcc7ad937241461182e

  • SSDEEP

    196608:LD39islOdGn30lPJdw1ZYdo68vqjatuyxZPWyvEhBzD:LT91AU0lPJdw1Kdo68ijatJxFWWEhBzD

Score
8/10

Malware Config

Targets

    • Target

      zabbix_agent-6.0.21-windows-amd64-openssl.msi

    • Size

      6.7MB

    • MD5

      ec054839fb80a3be1e94412b18315664

    • SHA1

      6033d5e793a7f070caa23d06af78fb30494bf92e

    • SHA256

      44d3ac3c6fcf3d8d81478df6fa73799f19143df99f2216fea7e5ab4adb2f1611

    • SHA512

      062ae9c2017ce8db1fc2521e1d3ed3693c55a04bf6bfc4f97d968095c90b237bb697670ba5c3ae9a2cf1e87e9a73f652dd93eb519c22abcc7ad937241461182e

    • SSDEEP

      196608:LD39islOdGn30lPJdw1ZYdo68vqjatuyxZPWyvEhBzD:LT91AU0lPJdw1Kdo68ijatJxFWWEhBzD

    Score
    8/10
    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks