Overview

overview

8

Static

static

1

install.msi

windows7-x64

7

install.msi

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    install.msi

  • Size

    1.1MB

  • Sample

    231211-jgy2naggan

  • MD5

    177233c88c71a12b6dd192ad1cda735f

  • SHA1

    fa36613e47fe2bf72657767ba87f9ab6a86bc9ca

  • SHA256

    f6b71317e15b0fe5dd80e6dbddf09e7935c270eeb13c2cd90cec12b069359255

  • SHA512

    003677a6da400545b24518c0a70138a8eae0fbe46e47ebb88b6d016291aeb2703c31fb8a4260d19f02e6029ba9249df6d007c22e54ef3d6bd94267f58c154c7e

  • SSDEEP

    24576:3sIYKztdfG8NQGafAdbe/IEFXsaV5C7eYVLsTPRDKe:3sIYefNQGoAhRaV5C77yPROe

Score
8/10

Malware Config

Targets

    • Target

      install.msi

    • Size

      1.1MB

    • MD5

      177233c88c71a12b6dd192ad1cda735f

    • SHA1

      fa36613e47fe2bf72657767ba87f9ab6a86bc9ca

    • SHA256

      f6b71317e15b0fe5dd80e6dbddf09e7935c270eeb13c2cd90cec12b069359255

    • SHA512

      003677a6da400545b24518c0a70138a8eae0fbe46e47ebb88b6d016291aeb2703c31fb8a4260d19f02e6029ba9249df6d007c22e54ef3d6bd94267f58c154c7e

    • SSDEEP

      24576:3sIYKztdfG8NQGafAdbe/IEFXsaV5C7eYVLsTPRDKe:3sIYefNQGoAhRaV5C77yPROe

    Score
    8/10

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks