Behavioral task
behavioral1
Sample
Security_Procedures_Updated.msi
Resource
win7-20240903-en
25 signatures
150 seconds
Behavioral task
behavioral2
Sample
Security_Procedures_Updated.msi
Resource
win10v2004-20250217-en
26 signatures
150 seconds
General
-
Target
21729502126.zip
-
Size
2.6MB
-
MD5
c47c52a51f16b02d8666e1489f92d854
-
SHA1
16c2c76826224c56ac89dbab9426736cb4a1bcd9
-
SHA256
5a074d3c7736cbc9ccae728e7dca9d14366c3943b686d62f435bba893283c5c8
-
SHA512
bb4648210c607ef61123ece7371284b4bd3f2ee11ec8fdccfbe2b2adc73aeb4be936fd47750f6134123998d372fc595c2183356a40c6b6e3248ed0c1c7532156
-
SSDEEP
49152:SRJyxaX7BuH45mtX77F09kMRFuie1hIaE7aAou7zu0AmHNJu8c7W3DLsR:SbyxaX7BuH4Q7J0rR49hIaU1zJVNY57P
Score
10/10
Malware Config
Signatures
-
Ateraagent family
-
Detects AteraAgent 1 IoCs
resource yara_rule static1/unpack003/Security_Procedures_Updated.msi family_ateraagent
Files
-
21729502126.zip.zip
Password: infected
-
d087188727ad597902218ce1ba4d827a4593267a6b2c4d5d686faf10e60b7f29.msg
-
Security_Procedures_Updated.zip.zip
Password: infected
-
Security_Procedures_Updated.msi.msi