General
-
Target
e7d97013314341bbdb5abd3bdade00039a87ec865efc3df4a72feab27f82bf52.msi
-
Size
2.9MB
-
Sample
241109-eh79hazlfl
-
MD5
d3fe8c624c5cf20711ca3d62c66d208c
-
SHA1
d831219e226b63d4a9394d26333151356539c000
-
SHA256
e7d97013314341bbdb5abd3bdade00039a87ec865efc3df4a72feab27f82bf52
-
SHA512
bbb0f11d69d9c5750a469618cb6aab065bc0ec74bd46d2ebc1bb0ba52e44a62a77436173835e580f70a1de62aa9b58c9d4902a969fca5449acb5d5f708833473
-
SSDEEP
49152:F+1Ypn4N2MGVv1zyIBWGppT9jnMHRjOOozjcqZJN8dUZTwYaH7oqPxMbY+K/tzQz:F+lUlz9FKbsodq0YaH7ZPxMb8tT
Behavioral task
behavioral1
Sample
e7d97013314341bbdb5abd3bdade00039a87ec865efc3df4a72feab27f82bf52.msi
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e7d97013314341bbdb5abd3bdade00039a87ec865efc3df4a72feab27f82bf52.msi
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
e7d97013314341bbdb5abd3bdade00039a87ec865efc3df4a72feab27f82bf52.msi
-
Size
2.9MB
-
MD5
d3fe8c624c5cf20711ca3d62c66d208c
-
SHA1
d831219e226b63d4a9394d26333151356539c000
-
SHA256
e7d97013314341bbdb5abd3bdade00039a87ec865efc3df4a72feab27f82bf52
-
SHA512
bbb0f11d69d9c5750a469618cb6aab065bc0ec74bd46d2ebc1bb0ba52e44a62a77436173835e580f70a1de62aa9b58c9d4902a969fca5449acb5d5f708833473
-
SSDEEP
49152:F+1Ypn4N2MGVv1zyIBWGppT9jnMHRjOOozjcqZJN8dUZTwYaH7oqPxMbY+K/tzQz:F+lUlz9FKbsodq0YaH7ZPxMb8tT
-
Ateraagent family
-
Detects AteraAgent
-
Blocklisted process makes network request
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1System Binary Proxy Execution
1Msiexec
1