Overview

overview

6

Static

static

1

setup.msi

windows7-x64

6

setup.msi

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    setup.msi

  • Size

    32.5MB

  • Sample

    240727-kkyqqs1blg

  • MD5

    913dd084c6111ce99ba36a761f2b7860

  • SHA1

    a55a20c196253cc8f7e8729b99b9ec62a7025202

  • SHA256

    03e1816244c55ee12a718b263bb777a6390236a70bd53187dc8be888da1068bd

  • SHA512

    1547f0f6d4fbf4b667d493018491f5ece9c37df4cfea6d75425c5711a064837eaf23946310f95bef443392f332871b8dc6fc7410d9f38de642eda5decb759f77

  • SSDEEP

    786432:3RQHUyTDXySTjxA4Ztx2+G+N0WYQYBXPByttH+dktHEDv0y:3RQH7xVLYjsp+ikJ

Score
6/10
discoverypersistenceprivilege_escalation

Malware Config

Targets

    • Target

      setup.msi

    • Size

      32.5MB

    • MD5

      913dd084c6111ce99ba36a761f2b7860

    • SHA1

      a55a20c196253cc8f7e8729b99b9ec62a7025202

    • SHA256

      03e1816244c55ee12a718b263bb777a6390236a70bd53187dc8be888da1068bd

    • SHA512

      1547f0f6d4fbf4b667d493018491f5ece9c37df4cfea6d75425c5711a064837eaf23946310f95bef443392f332871b8dc6fc7410d9f38de642eda5decb759f77

    • SSDEEP

      786432:3RQHUyTDXySTjxA4Ztx2+G+N0WYQYBXPByttH+dktHEDv0y:3RQH7xVLYjsp+ikJ

    Score
    6/10
    discoverypersistenceprivilege_escalation

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks