Overview

overview

6

Static

static

1

daa3f3ff73...ad.msi

windows7-x64

6

daa3f3ff73...ad.msi

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    daa3f3ff735da217e65b4b372abea33a2c11796a4432b67852957fd9dfdb35ad.msi

  • Size

    4.6MB

  • Sample

    240812-bqs8rsydll

  • MD5

    b579209ffd24ed37bc4c4aa95dbd027e

  • SHA1

    cc5643c0dca29e91c8f7fcbd1e2784601c06caea

  • SHA256

    daa3f3ff735da217e65b4b372abea33a2c11796a4432b67852957fd9dfdb35ad

  • SHA512

    d052a5fccb4e630e2d444aa74fbc7722e2bf553f1bff0f7f98078a9b9e0c5cd862006d36213ebecb7dc2834c3fd4a4af89af6d061df632894a948b912e429db1

  • SSDEEP

    98304:xEqANPKab52vFRkfwWc+u6M7ucTRDLKu7t58MUYrrpuP9tCFB7FS:WPKpkfwWlu66PRDLb58MnrrOt

Score
6/10
discoverypersistenceprivilege_escalation

Malware Config

Targets

    • Target

      daa3f3ff735da217e65b4b372abea33a2c11796a4432b67852957fd9dfdb35ad.msi

    • Size

      4.6MB

    • MD5

      b579209ffd24ed37bc4c4aa95dbd027e

    • SHA1

      cc5643c0dca29e91c8f7fcbd1e2784601c06caea

    • SHA256

      daa3f3ff735da217e65b4b372abea33a2c11796a4432b67852957fd9dfdb35ad

    • SHA512

      d052a5fccb4e630e2d444aa74fbc7722e2bf553f1bff0f7f98078a9b9e0c5cd862006d36213ebecb7dc2834c3fd4a4af89af6d061df632894a948b912e429db1

    • SSDEEP

      98304:xEqANPKab52vFRkfwWc+u6M7ucTRDLKu7t58MUYrrpuP9tCFB7FS:WPKpkfwWlu66PRDLb58MnrrOt

    Score
    6/10
    discoverypersistenceprivilege_escalation

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks