General
- Target Adobe%20Reader%20Plugin.msi
- Size 2.6MB
- Sample251217-pgbh9axmbp
- SHA256 5a0615ce1b5694d67845640635b031246fef00af012ce9f5dfeac82e76622d95
Score
10/10
Malware Config
Targets
-
- Target Adobe%20Reader%20Plugin.msi
- Size 2.6MB
- SHA256 5a0615ce1b5694d67845640635b031246fef00af012ce9f5dfeac82e76622d95
Score10/10AteraAgent
AteraAgent is a remote monitoring and management tool.
Ateraagent family
Detects AteraAgent
Executes dropped EXE
Loads dropped DLL
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1System Binary Proxy Execution
1Msiexec
1