Behavioral task
behavioral1
Sample
setup_the_australian_lending__investment_centre_kathmandu.msi
Resource
win7-20240903-en
windows7-x64
25 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup_the_australian_lending__investment_centre_kathmandu.msi
Resource
win10v2004-20241007-en
windows10-2004-x64
34 signatures
150 seconds
General
-
Target
setup_the_australian_lending__investment_centre_kathmandu.msi
-
Size
2.9MB
-
MD5
db9d2b56b0b1f99c3c3759668311bc43
-
SHA1
d38a991043b8e3dd1acf12be974adbf5c56914ce
-
SHA256
dea4e36c02e72f6ad9570b5f098ffd20820e372a051f3c48db2c2c6b63203c4e
-
SHA512
7b09d55bea24856e3f97b4b8cc9b86bcd74b8f399a7ddf417532321a88ce683f3f45a0f27e9ddf81aee23a9935f23fc443014d637d2cad0fd1a2f07188faefa4
-
SSDEEP
49152:x+1Ypn4N2MGVv1zyIBWGppT9jnMHRjOOozjcqZJN8dUZTwYaH7oqPxMbY+K/tzQz:x+lUlz9FKbsodq0YaH7ZPxMb8tT
Score
10/10
Malware Config
Signatures
-
Ateraagent family
-
Detects AteraAgent 1 IoCs
Processes:
resource yara_rule sample family_ateraagent
Files
-
setup_the_australian_lending__investment_centre_kathmandu.msi.msi