b4c049ddf662ed9b5aceb5ab60b7962169ecd740408bd0a5d1274d6e6c6be448 | Triage

Sharing

General

Target

57a55d067c89c10d205abaa98a2e14dd.bin
Size

32.2MB
Sample

240826-bqxaesydjn
MD5

0e4394b75f2cad4ce5fe6bc7a718744c
SHA1

fc892dfe2a18f4e20decd85c1891085dbd5ea08f
SHA256

b4c049ddf662ed9b5aceb5ab60b7962169ecd740408bd0a5d1274d6e6c6be448
SHA512

67a5403458931d192cf43309887c80e824f09abc84fb616fbac79f084ee67aa9d7c63076ad7120a2c211181b76053c9b00db5cbc84be76e0854ee9473c942946
SSDEEP

786432:6+hJQ4x+K9p0W9HD23h8djOP9eh0jgQylGpA1kTB7QLe:yKQWBa3+8eSjeYpHQK

Score

6^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  9cd58f52226fc376f837447d0c4ebed7b0473cc4166f9e8ad0265bbfd7ac4462.msi
- Size
  
  34.2MB
- MD5
  
  57a55d067c89c10d205abaa98a2e14dd
- SHA1
  
  9e83844b5f6f77660424db4df4c3554503855d23
- SHA256
  
  9cd58f52226fc376f837447d0c4ebed7b0473cc4166f9e8ad0265bbfd7ac4462
- SHA512
  
  c1eec66216b9ac436d4a323b8866c1c4d9ae1d4c57d6282fc490098e54a4146ae75af73aeaabd3ba26a48cd4ee7b81a3da08f392b5dbc349dd7b0435af34d6ff
- SSDEEP
  
  786432:Gt9VUyTDXySTjxA4Ztx2+G+N0WYQYBXPByttH+dktHEDv0yduCb9fJq:Gt9p7xVLYjsp+ikJdu6f
Score

6^/10

discovery persistence privilege_escalation
- Blocklisted process makes network request
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Installer Packages

Privilege Escalation

Event Triggered Execution

Installer Packages

Defense Evasion

System Binary Proxy Execution

Msiexec

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation