Overview

overview

10

Static

static

10

0d47740bf9...68.msi

windows7-x64

10

0d47740bf9...68.msi

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0d47740bf97710835ebe91ac545ff0da45d81b54dfb8e2dea485fe5a123ae468.msi

  • Size

    2.9MB

  • Sample

    241201-sjm7lsvjby

  • MD5

    2ba70a300e16d1b51bd103de907777d8

  • SHA1

    9774343aeb3b6f06593fc84a59422ef3b8cce66b

  • SHA256

    0d47740bf97710835ebe91ac545ff0da45d81b54dfb8e2dea485fe5a123ae468

  • SHA512

    a2ba8694ea4d014e4103ed02d11ba7309d0ce0f290f55f0d671710cdf61f6d06d976531469686325965966a2d9cd5a0b3a69f47ca5b351b40da03ffaf15d47bb

  • SSDEEP

    49152:h+1Ypn4N2MGVv1zyIBWGppT9jnMHRjOOozjcqZJN8dUZTwYaH7oqPxMbY+K/tzQz:h+lUlz9FKbsodq0YaH7ZPxMb8tT

Score
10/10
ateraagentdiscoverypersistenceprivilege_escalationrat

Malware Config

Targets

    • Target

      0d47740bf97710835ebe91ac545ff0da45d81b54dfb8e2dea485fe5a123ae468.msi

    • Size

      2.9MB

    • MD5

      2ba70a300e16d1b51bd103de907777d8

    • SHA1

      9774343aeb3b6f06593fc84a59422ef3b8cce66b

    • SHA256

      0d47740bf97710835ebe91ac545ff0da45d81b54dfb8e2dea485fe5a123ae468

    • SHA512

      a2ba8694ea4d014e4103ed02d11ba7309d0ce0f290f55f0d671710cdf61f6d06d976531469686325965966a2d9cd5a0b3a69f47ca5b351b40da03ffaf15d47bb

    • SSDEEP

      49152:h+1Ypn4N2MGVv1zyIBWGppT9jnMHRjOOozjcqZJN8dUZTwYaH7oqPxMbY+K/tzQz:h+lUlz9FKbsodq0YaH7ZPxMb8tT

    Score
    10/10
    ateraagentdiscoverypersistenceprivilege_escalationrat

    • AteraAgent

      AteraAgent is a remote monitoring and management tool.

      ratateraagent

    • Ateraagent family

      ateraagent

    • Detects AteraAgent

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks