General

  • Target

    Setup-9.msi

  • Size

    4.5MB

  • Sample

    231112-2nwh8adf96

  • MD5

    8c2426a55500ed5253cf5c67daf9c63f

  • SHA1

    3fd73a9aa967c95582003546cadf51fd728a3600

  • SHA256

    e4cb8865fd9df4126cf862b40b1f30f36fa4f597551fd7abd1a6e36773b04bb3

  • SHA512

    8ad582609f7ed9fb9835bc97dfa99fc512514a7cfe117e897b3e6e9f55392de16637031b7e651b27d90262680663aaa4e2f9719c1c9917e30093712cfbdf81cb

  • SSDEEP

    49152:M2PVitd+vszAlozTy4A5a8X5ONBAuj2WfWW9CdDLwYj0q5sV3cQ3azCHknkQRAYc:fihTyCFjXEjI3/k5gU99UZbg6m1

Score
7/10

Malware Config

Targets

    • Target

      Setup-9.msi

    • Size

      4.5MB

    • MD5

      8c2426a55500ed5253cf5c67daf9c63f

    • SHA1

      3fd73a9aa967c95582003546cadf51fd728a3600

    • SHA256

      e4cb8865fd9df4126cf862b40b1f30f36fa4f597551fd7abd1a6e36773b04bb3

    • SHA512

      8ad582609f7ed9fb9835bc97dfa99fc512514a7cfe117e897b3e6e9f55392de16637031b7e651b27d90262680663aaa4e2f9719c1c9917e30093712cfbdf81cb

    • SSDEEP

      49152:M2PVitd+vszAlozTy4A5a8X5ONBAuj2WfWW9CdDLwYj0q5sV3cQ3azCHknkQRAYc:fihTyCFjXEjI3/k5gU99UZbg6m1

    Score
    7/10
    • Loads dropped DLL

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks