General
- Target file.msi
- Size 1.8MB
- Sample241113-qwd4csslbz
- SHA256 118c1187c5b37ab9c4f9f39500d777c0a914c379d853439608157379dcb71772
- MD5 b62391ef588987e34030159325987a21
- SHA1 7c8d0c37a8dd4d9f5c9447f7d6f78926d05d6d2d
- SHA512 a4ae63f9cd71d78303cdd1d3aa9e7bfad36e735b773210a26a2af4907aa6ee63e9edc2959a2f1eb9999808727bbdec523e430d3dc91d4bdc603c829b53e5432a
- SSDEEP 49152:9acTt5QDGgYBkx5upDun9RaUnxKvmP4vMbu5yxig:RwYBkhaU8vm
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.msi
Resource
win10v2004-20241007-en
14 signatures
1200 seconds
Behavioral task
behavioral2
Sample
file.msi
Resource
win11-20241007-en
14 signatures
1200 seconds
Malware Config
Targets
-
- Target file.msi
- Size 1.8MB
- SHA256 118c1187c5b37ab9c4f9f39500d777c0a914c379d853439608157379dcb71772
- MD5 b62391ef588987e34030159325987a21
- SHA1 7c8d0c37a8dd4d9f5c9447f7d6f78926d05d6d2d
- SHA512 a4ae63f9cd71d78303cdd1d3aa9e7bfad36e735b773210a26a2af4907aa6ee63e9edc2959a2f1eb9999808727bbdec523e430d3dc91d4bdc603c829b53e5432a
- SSDEEP 49152:9acTt5QDGgYBkx5upDun9RaUnxKvmP4vMbu5yxig:RwYBkhaU8vm
- MD5 SHA1 SHA512 SSDEEP
Use of msiexec (install) with remote resource
Blocklisted process makes network request
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.