General

  • Target

    WhatsApp.msi

  • Size

    124.6MB

  • Sample

    231008-kmpwlsah6t

  • MD5

    27ac0bec2ae49109be73383ceeb1bd47

  • SHA1

    381e99cdb4879695c4e0724252d58b2ce5d704a3

  • SHA256

    6416e9f05d6ca577b50118ff2380d230355a6dd4a829dd0e27c3235f649fe5a0

  • SHA512

    b9b4eec731e1b4e1ee930ee558fbfdd8734ec7b89420d15624e8ef0ef5f22e25e32a3fadd3900f5a02f38e663d845c69e49844bce033b7afbbad498f132fc085

  • SSDEEP

    3145728:KVaVvWNKA7kZaHdH++Y7xWAAGslksbg6RJ4mw7WnK4boY0Un6:hVvbAwqN+Bx1ylNJ4mHKbY0

Score
7/10

Malware Config

Targets

    • Target

      WhatsApp.msi

    • Size

      124.6MB

    • MD5

      27ac0bec2ae49109be73383ceeb1bd47

    • SHA1

      381e99cdb4879695c4e0724252d58b2ce5d704a3

    • SHA256

      6416e9f05d6ca577b50118ff2380d230355a6dd4a829dd0e27c3235f649fe5a0

    • SHA512

      b9b4eec731e1b4e1ee930ee558fbfdd8734ec7b89420d15624e8ef0ef5f22e25e32a3fadd3900f5a02f38e663d845c69e49844bce033b7afbbad498f132fc085

    • SSDEEP

      3145728:KVaVvWNKA7kZaHdH++Y7xWAAGslksbg6RJ4mw7WnK4boY0Un6:hVvbAwqN+Bx1ylNJ4mHKbY0

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks