Overview

overview

7

Static

static

1

FaturaVivo.pdf96.msi

windows7-x64

FaturaVivo.pdf96.msi

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    FaturaVivo.pdf96.msi

  • Size

    4.6MB

  • Sample

    240807-p1r1cascnh

  • MD5

    4d5f7f3d73e21811b607b14070935390

  • SHA1

    f8d216641c89ca58df0f5ed0b8543f68f02ef1c9

  • SHA256

    cd0d64c504bcb77944ea917ec72d8fd95d2c3c6a073f0b19b2e7beedfa0b85e4

  • SHA512

    c0e25f68dc681835021e6238c08ed33430275a520df68d4a831d2788d22a514d44c2803b581ad720ecf1f948318ea9898c63c596de57ff5a18ade73992df59a9

  • SSDEEP

    98304:IY5AqbFUXb52TaeHbV7FVAs/i24NaHdAeah32ILTauGLCY4YUR5IhciUHc4kJT:NxUXb5saeHbVBVAsOaHdSQ2BfYY5Kcif

Score
7/10
discoverypersistenceprivilege_escalation

Malware Config

Targets

    • Target

      FaturaVivo.pdf96.msi

    • Size

      4.6MB

    • MD5

      4d5f7f3d73e21811b607b14070935390

    • SHA1

      f8d216641c89ca58df0f5ed0b8543f68f02ef1c9

    • SHA256

      cd0d64c504bcb77944ea917ec72d8fd95d2c3c6a073f0b19b2e7beedfa0b85e4

    • SHA512

      c0e25f68dc681835021e6238c08ed33430275a520df68d4a831d2788d22a514d44c2803b581ad720ecf1f948318ea9898c63c596de57ff5a18ade73992df59a9

    • SSDEEP

      98304:IY5AqbFUXb52TaeHbV7FVAs/i24NaHdAeah32ILTauGLCY4YUR5IhciUHc4kJT:NxUXb5saeHbVBVAsOaHdSQ2BfYY5Kcif

    Score
    7/10
    discoverypersistenceprivilege_escalation

    • Drops startup file

    • Adds Run key to start application

      persistence

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks