General
- Target invitationcard_Ti.msi
- Size 18.0MB
- Sample260506-ebxt7aes3p
- SHA256 7345df9eaedd6eb0a5e4c15a01d02fa8eb40a674166243853e26a04b55fa2d34
- MD5 20078e3e41e6e54d000b7b06c3f29a97
- SHA1 8d0329b31243d7b39b02bd386524b26ce4e339f5
- SHA512 166fff873a31e636183e51adaa4fac10633d1802880ad7a618dfc5f82271e36ebeb2a0a132eaf2d0e2acf29d4f1be0d691adecf76da18ee0e8c4846bd4616580
- SSDEEP 393216:AyMlmCjkFXIR3RM92hJqaiWF0kbaAHbEcN1tH0f6pvm8pGaF:nCj8XUW27YWFlbaAHbhL5
- TLSH T19817339BDE027F76F263DA3F47E1171D55A12D535453C0ABA3223A3C0A36B817BE9089
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
invitationcard_Ti.msi
Resource
win11-20260130-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target invitationcard_Ti.msi
- Size 18.0MB
- SHA256 7345df9eaedd6eb0a5e4c15a01d02fa8eb40a674166243853e26a04b55fa2d34
- MD5 20078e3e41e6e54d000b7b06c3f29a97
- SHA1 8d0329b31243d7b39b02bd386524b26ce4e339f5
- SHA512 166fff873a31e636183e51adaa4fac10633d1802880ad7a618dfc5f82271e36ebeb2a0a132eaf2d0e2acf29d4f1be0d691adecf76da18ee0e8c4846bd4616580
- SSDEEP 393216:AyMlmCjkFXIR3RM92hJqaiWF0kbaAHbEcN1tH0f6pvm8pGaF:nCj8XUW27YWFlbaAHbhL5
- TLSH T19817339BDE027F76F263DA3F47E1171D55A12D535453C0ABA3223A3C0A36B817BE9089
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Installer Packages
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Installer Packages
1