Overview

overview

10

Static

static

10

c9cecdd28f...21.msi

windows7-x64

10

c9cecdd28f...21.msi

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c9cecdd28f5fe29825d83e1c3f022462926de9af99d388662d8c62b16d78e621.msi

  • Size

    2.9MB

  • Sample

    241109-d52vkawhpq

  • MD5

    ca547b71f62c449c8e365701212469d9

  • SHA1

    43d9688cb60427723cf098896d762b010487bbee

  • SHA256

    c9cecdd28f5fe29825d83e1c3f022462926de9af99d388662d8c62b16d78e621

  • SHA512

    6ebe3885cc2ddad0c8579ece4344d6c3b75929e389270aabd409ecdea3772f7baa1b866e0f4a37e706441c8a17d1e243cb9cd81b659fec42db69fcfff1fa6f2e

  • SSDEEP

    49152:a+1Ypn4N2MGVv1zyIBWGppT9jnMHRjOOozjcqZJN8dUZTwYaH7oqPxMbY+K/tzQz:a+lUlz9FKbsodq0YaH7ZPxMb8tT

Score
10/10
ateraagentdiscoverypersistenceprivilege_escalationrat

Malware Config

Targets

    • Target

      c9cecdd28f5fe29825d83e1c3f022462926de9af99d388662d8c62b16d78e621.msi

    • Size

      2.9MB

    • MD5

      ca547b71f62c449c8e365701212469d9

    • SHA1

      43d9688cb60427723cf098896d762b010487bbee

    • SHA256

      c9cecdd28f5fe29825d83e1c3f022462926de9af99d388662d8c62b16d78e621

    • SHA512

      6ebe3885cc2ddad0c8579ece4344d6c3b75929e389270aabd409ecdea3772f7baa1b866e0f4a37e706441c8a17d1e243cb9cd81b659fec42db69fcfff1fa6f2e

    • SSDEEP

      49152:a+1Ypn4N2MGVv1zyIBWGppT9jnMHRjOOozjcqZJN8dUZTwYaH7oqPxMbY+K/tzQz:a+lUlz9FKbsodq0YaH7ZPxMb8tT

    Score
    10/10
    ateraagentdiscoverypersistenceprivilege_escalationrat

    • AteraAgent

      AteraAgent is a remote monitoring and management tool.

      ratateraagent

    • Ateraagent family

      ateraagent

    • Detects AteraAgent

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks