Overview

overview

8

Static

static

1

35857d1db3...81.msi

windows7-x64

8

35857d1db3...81.msi

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    35857d1db3f83fe2c0ee0a3502276e7352beaa242d9a31573e639bf175379c81.zip

  • Size

    90KB

  • Sample

    240531-rb9vzaag7z

  • MD5

    3882945bf10976fda39eb3fe7de4fe51

  • SHA1

    81c12a883bcfe2bc70ffcac37f976b219940a78d

  • SHA256

    4cd523e39fb0a0dc879beaada00cdaf371d2b035387be1556edb4ae3f44eb666

  • SHA512

    99a5dd7567150d6499533244caa5d00c676e3d05011a17b499831f223bd51a1b5f8ba8ada5e4dcd4728195df6f1745caa7e48b0e4a77850ae503987627c41df3

  • SSDEEP

    1536:DKVqmOGvue0ys0avhyNIs0fIlsInENcEBU5au6DSJyxgCWsUxssZWDJXTR0zK4:DKqmO4u8s0avheVsIlscENcXMLkyxrAR

Score
8/10
execution

Malware Config

Targets

    • Target

      35857d1db3f83fe2c0ee0a3502276e7352beaa242d9a31573e639bf175379c81.msi

    • Size

      256KB

    • MD5

      96cc7a1ea5b7605f2d9d092de5daca2c

    • SHA1

      4be0d077730f5aa522ce3be9cb990a6f652d1385

    • SHA256

      35857d1db3f83fe2c0ee0a3502276e7352beaa242d9a31573e639bf175379c81

    • SHA512

      db685089473c0a0e59964f4f8c7fea32f4f725864042136c56393b38828f3df8707683eceecdba4682da6d2b8f76724039cf75c4226d310d88013c662c8c81e2

    • SSDEEP

      3072:KEhM5rlsiqb4GeL8t6AqHH6NB4G3o5k8JCOCY2mf7AAYz+H3CMIjWtxyc:KEgqJ8GI8IHe3PO86QjWyc

    Score
    8/10
    execution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks