Overview

overview

10

Static

static

10

09e0950396...d6.msi

windows7-x64

10

09e0950396...d6.msi

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6

  • Size

    2.9MB

  • Sample

    241202-t8w2gssncx

  • MD5

    f1c935ce028022ab2a495eae83adacc6

  • SHA1

    1dd0301a120d6cbed1d22b9d1fb8c9d3d6793546

  • SHA256

    09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6

  • SHA512

    615a3d67a164131c961b9dc532a79d8ab46e30d0cc56831776ac5d9d243b404fdb998aa4e9b67bcf9ab7c2a52dd6373452f3addf213f16aee6016008b4a1463b

  • SSDEEP

    49152:J+1Ypn4N2MGVv1zyIBWGppT9jnMHRjOOozjcqZJN8dUZTwYaH7oqPxMbY+K/tzQz:J+lUlz9FKbsodq0YaH7ZPxMb8tT

Score
10/10
ateraagentdiscoverypersistenceprivilege_escalationrat

Malware Config

Targets

    • Target

      09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6

    • Size

      2.9MB

    • MD5

      f1c935ce028022ab2a495eae83adacc6

    • SHA1

      1dd0301a120d6cbed1d22b9d1fb8c9d3d6793546

    • SHA256

      09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6

    • SHA512

      615a3d67a164131c961b9dc532a79d8ab46e30d0cc56831776ac5d9d243b404fdb998aa4e9b67bcf9ab7c2a52dd6373452f3addf213f16aee6016008b4a1463b

    • SSDEEP

      49152:J+1Ypn4N2MGVv1zyIBWGppT9jnMHRjOOozjcqZJN8dUZTwYaH7oqPxMbY+K/tzQz:J+lUlz9FKbsodq0YaH7ZPxMb8tT

    Score
    10/10
    ateraagentdiscoverypersistenceprivilege_escalationrat

    • AteraAgent

      AteraAgent is a remote monitoring and management tool.

      ratateraagent

    • Ateraagent family

      ateraagent

    • Detects AteraAgent

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks