Overview

overview

10

Static

static

10

setup_fud.msi

windows7-x64

10

setup_fud.msi

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    setup_fud.msi

  • Size

    2.9MB

  • Sample

    241202-vjwj4aypdj

  • MD5

    dc58a4a73b4a34ecd7d08707b636b1d7

  • SHA1

    82945fcb61fda0e3f4249bf5b0543ce29aea15e4

  • SHA256

    331b07061ddbf912f002da62c9c456287f8f2afa9221a3069c7262554ae653c6

  • SHA512

    838f040936240cce94943e2e6f9cac763b75eb61491c4813e48d2179c6a00282d91980eeffbfcdc1ce8f3a7661961ee4776643067f1b23cb665ad2cd66e8f057

  • SSDEEP

    49152:T+1Ypn4N2MGVv1zyIBWGppT9jnMHRjOOozjcqZJN8dUZTwYaH7oqPxMbY+K/tzQz:T+lUlz9FKbsodq0YaH7ZPxMb8tT

Score
10/10
ateraagentdiscoverypersistenceprivilege_escalationrat

Malware Config

Targets

    • Target

      setup_fud.msi

    • Size

      2.9MB

    • MD5

      dc58a4a73b4a34ecd7d08707b636b1d7

    • SHA1

      82945fcb61fda0e3f4249bf5b0543ce29aea15e4

    • SHA256

      331b07061ddbf912f002da62c9c456287f8f2afa9221a3069c7262554ae653c6

    • SHA512

      838f040936240cce94943e2e6f9cac763b75eb61491c4813e48d2179c6a00282d91980eeffbfcdc1ce8f3a7661961ee4776643067f1b23cb665ad2cd66e8f057

    • SSDEEP

      49152:T+1Ypn4N2MGVv1zyIBWGppT9jnMHRjOOozjcqZJN8dUZTwYaH7oqPxMbY+K/tzQz:T+lUlz9FKbsodq0YaH7ZPxMb8tT

    Score
    10/10
    ateraagentdiscoverypersistenceprivilege_escalationrat

    • AteraAgent

      AteraAgent is a remote monitoring and management tool.

      ratateraagent

    • Ateraagent family

      ateraagent

    • Detects AteraAgent

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks