General

  • Target

    transmission-4.0.6-x64.msi

  • Size

    18.0MB

  • Sample

    240805-qzrhvsxerm

  • MD5

    fa656a2edce7829c521b9aba436f7d98

  • SHA1

    95ec5a13fd5dea4ec013dafe21e1110e0bc70775

  • SHA256

    29417282f2a5405018a211aa94e60d324657cf347e7a496ca7a51798ede0f6c1

  • SHA512

    ad115874772dcb8fe04b478ff37cef1196a4ad694c4d9e26b8e8e89f509ffa5ce8a6fa5e5f8db4d561b095a71f4d4f1629040030964213c8f4c4e9bac7c210ad

  • SSDEEP

    393216:8188kqvoztKo7FHJ6c3Ku9MifhX+4s3NHQa5aBHn6+sRH4+vvm0qEHmJ9Qh:G88kqKKMYcau9MGX3s3IHkH4wvRqTJu

Malware Config

Targets

    • Target

      transmission-4.0.6-x64.msi

    • Size

      18.0MB

    • MD5

      fa656a2edce7829c521b9aba436f7d98

    • SHA1

      95ec5a13fd5dea4ec013dafe21e1110e0bc70775

    • SHA256

      29417282f2a5405018a211aa94e60d324657cf347e7a496ca7a51798ede0f6c1

    • SHA512

      ad115874772dcb8fe04b478ff37cef1196a4ad694c4d9e26b8e8e89f509ffa5ce8a6fa5e5f8db4d561b095a71f4d4f1629040030964213c8f4c4e9bac7c210ad

    • SSDEEP

      393216:8188kqvoztKo7FHJ6c3Ku9MifhX+4s3NHQa5aBHn6+sRH4+vvm0qEHmJ9Qh:G88kqKKMYcau9MGX3s3IHkH4wvRqTJu

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks