General
- Target setup.msi
- Size 57.5MB
- Sample241226-ns5e2avlep
- SHA256 d14acce52061baa353ffd5698c16dd07a9cca9d86b28c1de64d51e21c3c3c6ac
- MD5 0c7afa785117afdb85ab29b0a12edc51
- SHA1 3b685880e7ec090ab3ead12d591b2aca1ac3dcfe
- SHA512 276ae21daeff60cdce52ade7ada801d89d642092160b1cbd91bec80f5f3e4fb339d79f4871c8eafa07d15763ca59f0b1bd04cb6b95f0f64a132674ae24fcc37d
- SSDEEP 786432:zGZojVmrjV7eIAtehOTZ0oZ4sdUuzt/NCaY2ksCo:zGcVmrjV7eIvhOTZ5RjVCa1tP
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
setup.msi
Resource
win7-20240903-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.msi
Resource
win10v2004-20241007-en
11 signatures
150 seconds
Behavioral task
behavioral3
Sample
setup.msi
Resource
win10ltsc2021-20241211-en
11 signatures
150 seconds
Behavioral task
behavioral4
Sample
setup.msi
Resource
win11-20241007-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target setup.msi
- Size 57.5MB
- SHA256 d14acce52061baa353ffd5698c16dd07a9cca9d86b28c1de64d51e21c3c3c6ac
- MD5 0c7afa785117afdb85ab29b0a12edc51
- SHA1 3b685880e7ec090ab3ead12d591b2aca1ac3dcfe
- SHA512 276ae21daeff60cdce52ade7ada801d89d642092160b1cbd91bec80f5f3e4fb339d79f4871c8eafa07d15763ca59f0b1bd04cb6b95f0f64a132674ae24fcc37d
- SSDEEP 786432:zGZojVmrjV7eIAtehOTZ0oZ4sdUuzt/NCaY2ksCo:zGcVmrjV7eIvhOTZ5RjVCa1tP
- MD5 SHA1 SHA512 SSDEEP
-
Blocklisted process makes network request
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v15
Tasks
static1
Score
1/10
behavioral1
discoveryexecutionpersistenceprivilege_escalation
Score
6/10
behavioral2
discoveryexecutionpersistenceprivilege_escalation
Score
6/10
behavioral3
discoveryexecutionpersistenceprivilege_escalation
Score
6/10
behavioral4
discoveryexecutionpersistenceprivilege_escalation
Score
6/10