Overview

overview

10

Static

static

10

setup_rental.msi

windows7-x64

10

setup_rental.msi

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    setup_rental.msi

  • Size

    2.9MB

  • Sample

    241202-1jb4cazndj

  • MD5

    75d9fdda3fbb447dd2959d57ce36ce05

  • SHA1

    b47c517401a403b0223516b48bb97e46b49582a6

  • SHA256

    04a0d6d0163cac589d13b11208a79fbf2ed4479158fb116a3cf3f7c88b47d71e

  • SHA512

    df3d59625a6641177ca7243535eb0eae64f17d4724c9aac1bdcb2bfe7faaab7c727b716b2f5b409829dcf95b187deb6b3266021a45ce25bb2c09103fbebff75f

  • SSDEEP

    49152:f+1Ypn4N2MGVv1zyIBWGppT9jnMHRjOOozjcqZJN8dUZTwYaH7oqPxMbY+K/tzQz:f+lUlz9FKbsodq0YaH7ZPxMb8tT

Score
10/10
ateraagentdiscoverypersistenceprivilege_escalationrat

Malware Config

Targets

    • Target

      setup_rental.msi

    • Size

      2.9MB

    • MD5

      75d9fdda3fbb447dd2959d57ce36ce05

    • SHA1

      b47c517401a403b0223516b48bb97e46b49582a6

    • SHA256

      04a0d6d0163cac589d13b11208a79fbf2ed4479158fb116a3cf3f7c88b47d71e

    • SHA512

      df3d59625a6641177ca7243535eb0eae64f17d4724c9aac1bdcb2bfe7faaab7c727b716b2f5b409829dcf95b187deb6b3266021a45ce25bb2c09103fbebff75f

    • SSDEEP

      49152:f+1Ypn4N2MGVv1zyIBWGppT9jnMHRjOOozjcqZJN8dUZTwYaH7oqPxMbY+K/tzQz:f+lUlz9FKbsodq0YaH7ZPxMb8tT

    Score
    10/10
    ateraagentdiscoverypersistenceprivilege_escalationrat

    • AteraAgent

      AteraAgent is a remote monitoring and management tool.

      ratateraagent

    • Ateraagent family

      ateraagent

    • Detects AteraAgent

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks