cfe864dc8921cc9f0655628dab61186aaf6c2637bfb07330761235e0d313ede7 | Triage

Sharing

General

Target

cfe864dc8921cc9f0655628dab61186aaf6c2637bfb07330761235e0d313ede7.msi
Size

57.0MB
Sample

241120-rxexqayejl
MD5

f10e41a3d26bc967d29e943e7646412e
SHA1

5bf433fc21ae4642b5e2d3554ea635276c7d69d2
SHA256

cfe864dc8921cc9f0655628dab61186aaf6c2637bfb07330761235e0d313ede7
SHA512

353d0209b07ef0bfb33f590c49790c38475f68fa2a8a1b2f0cd162fe709fbb8401a732c3986421fd972bec0cc41af759b2eaa8b7aaaeaa541a4a107edf89ed81
SSDEEP

1572864:KqMBR7E4kP1EiuC8IOcJcxYqK3/3uT19fP3Jf:KtR7E4+1ENIH+6/uT19H3Jf

Score

6^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  cfe864dc8921cc9f0655628dab61186aaf6c2637bfb07330761235e0d313ede7.msi
- Size
  
  57.0MB
- MD5
  
  f10e41a3d26bc967d29e943e7646412e
- SHA1
  
  5bf433fc21ae4642b5e2d3554ea635276c7d69d2
- SHA256
  
  cfe864dc8921cc9f0655628dab61186aaf6c2637bfb07330761235e0d313ede7
- SHA512
  
  353d0209b07ef0bfb33f590c49790c38475f68fa2a8a1b2f0cd162fe709fbb8401a732c3986421fd972bec0cc41af759b2eaa8b7aaaeaa541a4a107edf89ed81
- SSDEEP
  
  1572864:KqMBR7E4kP1EiuC8IOcJcxYqK3/3uT19fP3Jf:KtR7E4+1ENIH+6/uT19H3Jf
Score

6^/10

discovery persistence privilege_escalation
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Installer Packages

Privilege Escalation

Event Triggered Execution

Installer Packages

Defense Evasion

System Binary Proxy Execution

Msiexec

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation