General

  • Target

    node-v20.14.0-x64.msi

  • Size

    25.3MB

  • Sample

    240621-sgtxdaveme

  • MD5

    30ac11856e473e7f2e0fba7f2ac241e5

  • SHA1

    7e74eca21c5a8936081ff05cb2c743e17bc466e1

  • SHA256

    4235f05b99ae5dabadb5c10c124a0f7f7d4223e52df0857e4c4462b13f19c40e

  • SHA512

    644e0e3f905c8da9236537b8ce34ef23669ecfbccdf3ffa28ebba71e7258d62d804516fa47b0825ca016b50aaf7f353a12f99b3a3f0d8c08c11ab5da9eddade4

  • SSDEEP

    393216:VGmsMJelABFMciP7d7yivXrokK2YGO/6QLu0YuJhqAphmAtvIQPNY3:nFJe6eDPxj9rYSNpEdhmlQlY3

Malware Config

Targets

    • Target

      node-v20.14.0-x64.msi

    • Size

      25.3MB

    • MD5

      30ac11856e473e7f2e0fba7f2ac241e5

    • SHA1

      7e74eca21c5a8936081ff05cb2c743e17bc466e1

    • SHA256

      4235f05b99ae5dabadb5c10c124a0f7f7d4223e52df0857e4c4462b13f19c40e

    • SHA512

      644e0e3f905c8da9236537b8ce34ef23669ecfbccdf3ffa28ebba71e7258d62d804516fa47b0825ca016b50aaf7f353a12f99b3a3f0d8c08c11ab5da9eddade4

    • SSDEEP

      393216:VGmsMJelABFMciP7d7yivXrokK2YGO/6QLu0YuJhqAphmAtvIQPNY3:nFJe6eDPxj9rYSNpEdhmlQlY3

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks