Behavioral task
behavioral1
Sample
160d67508f3283df11379f4e5dfa87c68ead4fb9e355813b79560d56856012f4.msi
Resource
win7-20240903-en
windows7-x64
25 signatures
150 seconds
Behavioral task
behavioral2
Sample
160d67508f3283df11379f4e5dfa87c68ead4fb9e355813b79560d56856012f4.msi
Resource
win10v2004-20241007-en
windows10-2004-x64
26 signatures
150 seconds
General
-
Target
1237a9140ac0333e8f4dff131a18635e.bin
-
Size
2.6MB
-
MD5
9832536e9e8e646f94a12e9abbc5c5a5
-
SHA1
f0d95cef9b827798190ce80ba1c0a2760956f59f
-
SHA256
d403ec1cb843a83bc8f08ab393486010ec5de28263e2ca21bbe20a44e633d8d7
-
SHA512
7d2338a0ac84699d4b3e246e045233ad11315a5ae54c3ab956369c25e35db40d15558275c3d5a2a498dc26828a84d0e9a2277ab81264eb7c4b7815c9efb97a6f
-
SSDEEP
49152:YewvczZvQLlHSnqo2Fg/eYbi9pZWzroF3NA0RCy5S+ekABUnurY4fblp0:YilvAlHScg/3W9p24VkycPPY4H0
Score
10/10
Malware Config
Signatures
-
Ateraagent family
-
Detects AteraAgent 1 IoCs
Processes:
resource yara_rule static1/unpack001/160d67508f3283df11379f4e5dfa87c68ead4fb9e355813b79560d56856012f4.msi family_ateraagent
Files
-
1237a9140ac0333e8f4dff131a18635e.bin.zip
Password: infected
-
160d67508f3283df11379f4e5dfa87c68ead4fb9e355813b79560d56856012f4.msi.msi