General

  • Target

    e7d97013314341bbdb5abd3bdade00039a87ec865efc3df4a72feab27f82bf52.msi

  • Size

    2.9MB

  • Sample

    241109-eh79hazlfl

  • MD5

    d3fe8c624c5cf20711ca3d62c66d208c

  • SHA1

    d831219e226b63d4a9394d26333151356539c000

  • SHA256

    e7d97013314341bbdb5abd3bdade00039a87ec865efc3df4a72feab27f82bf52

  • SHA512

    bbb0f11d69d9c5750a469618cb6aab065bc0ec74bd46d2ebc1bb0ba52e44a62a77436173835e580f70a1de62aa9b58c9d4902a969fca5449acb5d5f708833473

  • SSDEEP

    49152:F+1Ypn4N2MGVv1zyIBWGppT9jnMHRjOOozjcqZJN8dUZTwYaH7oqPxMbY+K/tzQz:F+lUlz9FKbsodq0YaH7ZPxMb8tT

Malware Config

Targets

    • Target

      e7d97013314341bbdb5abd3bdade00039a87ec865efc3df4a72feab27f82bf52.msi

    • Size

      2.9MB

    • MD5

      d3fe8c624c5cf20711ca3d62c66d208c

    • SHA1

      d831219e226b63d4a9394d26333151356539c000

    • SHA256

      e7d97013314341bbdb5abd3bdade00039a87ec865efc3df4a72feab27f82bf52

    • SHA512

      bbb0f11d69d9c5750a469618cb6aab065bc0ec74bd46d2ebc1bb0ba52e44a62a77436173835e580f70a1de62aa9b58c9d4902a969fca5449acb5d5f708833473

    • SSDEEP

      49152:F+1Ypn4N2MGVv1zyIBWGppT9jnMHRjOOozjcqZJN8dUZTwYaH7oqPxMbY+K/tzQz:F+lUlz9FKbsodq0YaH7ZPxMb8tT

    • AteraAgent

      AteraAgent is a remote monitoring and management tool.

    • Ateraagent family

    • Detects AteraAgent

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Network Service Discovery

      Attempt to gather information on host's network.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks