General

  • Target

    CapTalkSetup.msi

  • Size

    22.0MB

  • Sample

    240228-vc2grsgh7t

  • MD5

    73137946a664fcf4c79a8d4ab7e3e90e

  • SHA1

    f9c0dd55ba400af20bab9fd9faf881c361810700

  • SHA256

    1ffe8209764db06b2f65a1bf47d208bbd7c08f5b31d5f798ba6b397f04ae421c

  • SHA512

    d7e122b43a4d8bc52386a4d2919091a4a3ff4e7900883f5242e6e8b646b6514081d95c9d748947088b8e47b2798709ade3df5c54b0d232a3445b3c9ff66d06af

  • SSDEEP

    393216:oRXWmhkB2RevIOXmc87p5jcCknXXnS4BzYRzgG8vccAzT1H//jA44:7mS2GIumc8jjcCmBzQsGt/t4

Score
6/10

Malware Config

Targets

    • Target

      CapTalkSetup.msi

    • Size

      22.0MB

    • MD5

      73137946a664fcf4c79a8d4ab7e3e90e

    • SHA1

      f9c0dd55ba400af20bab9fd9faf881c361810700

    • SHA256

      1ffe8209764db06b2f65a1bf47d208bbd7c08f5b31d5f798ba6b397f04ae421c

    • SHA512

      d7e122b43a4d8bc52386a4d2919091a4a3ff4e7900883f5242e6e8b646b6514081d95c9d748947088b8e47b2798709ade3df5c54b0d232a3445b3c9ff66d06af

    • SSDEEP

      393216:oRXWmhkB2RevIOXmc87p5jcCknXXnS4BzYRzgG8vccAzT1H//jA44:7mS2GIumc8jjcCmBzQsGt/t4

    Score
    6/10
    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks