Overview

overview

10

Static

static

10

671f3e2880...97.msi

windows7-x64

10

671f3e2880...97.msi

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    671f3e2880a809c70eb4ba951984f9cf4d52306988ab46af78fcd56879969a97.msi

  • Size

    2.9MB

  • Sample

    241123-cymavssjcq

  • MD5

    7f8ef88563fecc928cc24335bbb48ae6

  • SHA1

    050fb5d48707f31f48e727deffd17f848b71b1ff

  • SHA256

    671f3e2880a809c70eb4ba951984f9cf4d52306988ab46af78fcd56879969a97

  • SHA512

    f27a7b1263054f60fa87ce24cadf83d3fd88efddf1ce67d704a77da24310192251dfd13a9f8f8ebc6254ad9749013a8e823d2e4fd0f8dd0065894078649f537a

  • SSDEEP

    49152:7+1Ypn4N2MGVv1zyIBWGppT9jnMHRjOOozjcqZJN8dUZTwYaH7oqPxMbY+K/tzQz:7+lUlz9FKbsodq0YaH7ZPxMb8tT

Score
10/10
ateraagentdiscoverypersistenceprivilege_escalationrat

Malware Config

Targets

    • Target

      671f3e2880a809c70eb4ba951984f9cf4d52306988ab46af78fcd56879969a97.msi

    • Size

      2.9MB

    • MD5

      7f8ef88563fecc928cc24335bbb48ae6

    • SHA1

      050fb5d48707f31f48e727deffd17f848b71b1ff

    • SHA256

      671f3e2880a809c70eb4ba951984f9cf4d52306988ab46af78fcd56879969a97

    • SHA512

      f27a7b1263054f60fa87ce24cadf83d3fd88efddf1ce67d704a77da24310192251dfd13a9f8f8ebc6254ad9749013a8e823d2e4fd0f8dd0065894078649f537a

    • SSDEEP

      49152:7+1Ypn4N2MGVv1zyIBWGppT9jnMHRjOOozjcqZJN8dUZTwYaH7oqPxMbY+K/tzQz:7+lUlz9FKbsodq0YaH7ZPxMb8tT

    Score
    10/10
    ateraagentdiscoverypersistenceprivilege_escalationrat

    • AteraAgent

      AteraAgent is a remote monitoring and management tool.

      ratateraagent

    • Ateraagent family

      ateraagent

    • Detects AteraAgent

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks