ddb57a1da46eac1fa6f862420390490dc9c9686ba70ecd5a081372e1449cd279 | Triage

Resubmissions

30-10-2024 22:15

241030-16g8wa1kfx 6

30-10-2024 21:30

241030-1cqyxssqfm 6

30-10-2024 20:57

241030-zr1w1a1ejq 6

Sharing

General

Target

59534c8f39952cfac0d343133bf545e03c760093.msi.tar.gz
Size

34.6MB
Sample

241030-16g8wa1kfx
MD5

16523ea10ef6e31e770dd603fa606c6a
SHA1

73abd2e61d82d47ee496a48c72b3ac49a57ddc3f
SHA256

ddb57a1da46eac1fa6f862420390490dc9c9686ba70ecd5a081372e1449cd279
SHA512

ac36feaf73da8f12fd0f8c0e613f6bca80435ac7d57b8e7efabcd82c4fe61b216c89872d45ce363e7cc7f975d4e682f16f8504e72e0afa8a3c18f89016776885
SSDEEP

786432:3X/ZphMMbgfazenAeu+z8wnPqcT+g5IzJMEGHt+2uRR9M9qA3TFJgF7Feg:fZXAfazen5u+5PX+g58uPs2uRmzwUg

Score

6^/10

discovery persistence privilege_escalation pyinstaller

Malware Config

Targets

- Target
  
  59534c8f39952cfac0d343133bf545e03c760093.msi
- Size
  
  34.9MB
- MD5
  
  3e3a6891711f655ce0c850e266809198
- SHA1
  
  59534c8f39952cfac0d343133bf545e03c760093
- SHA256
  
  8fa1c8c2354f9323c13e6ead5426890bd89ad528fc9292612e8111b8d477973b
- SHA512
  
  aed321ed6ea4bf4cbf044ab3ef64166f1b57eb88615cdf15fa04a64bed3beae0cf7f83eda1bcd95073bf0749bec3dc944252baa4138aae60fd17924b8be58b6f
- SSDEEP
  
  786432:Qo8OSZQ2XkgZz6Zp0YzuRYuDRduAEthhT7G2hxEktr:4nUgc/03SuDRduAQX/zhxE
Score

6^/10

discovery persistence privilege_escalation pyinstaller
- Blocklisted process makes network request
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral1 behavioral2 behavioral3 behavioral4 behavioral5

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Installer Packages

Privilege Escalation

Event Triggered Execution

Installer Packages

Defense Evasion

System Binary Proxy Execution

Msiexec

Credential Access

Discovery

Network Service Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalationpyinstaller

behavioral2

discoverypersistenceprivilege_escalationpyinstaller

behavioral3

discoverypersistenceprivilege_escalationpyinstaller

behavioral4

discoverypersistenceprivilege_escalationpyinstaller

behavioral5

discoverypersistenceprivilege_escalationpyinstaller