General
- Target ZA_Access_My_Department.msi
- Size 29.5MB
- Sample260724-qdnj3s1bpg
- SHA256 b498ed5d6af695df10394bd0ee00045bcc9602e561d682798993d12e88389835
- MD5 a2f6b55b2a53b8e75950bcf18ed4002b
- SHA1 135ae7c98cdcdbc22929a11f35bf606cd9e08c5a
- SHA512 12147e5b19b085a4d8b3e7bda8f2906454c39c2730b98cc54a9ae7262028db1211b4299db3d996857d766df32f0ddb1f151b675cda5c523a35628ee50fb1a70f
- SSDEEP 786432:pNWZbpSLD/BhvSbzWUPK+DvELDQVxnSDXTm7:pN6b4/nEWS5DvFVNSnm
- TLSH T11A6733E81DDECF26DB83ACB18267395C91F2EC5A49645418F378F838A4B76E0D370946
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ZA_Access_My_Department.msi
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
ZA_Access_My_Department.msi
Resource
win10ltsc2021-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral3
Sample
ZA_Access_My_Department.msi
Resource
win11-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral4
Sample
ZA_Access_My_Department.msi
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target ZA_Access_My_Department.msi
- Size 29.5MB
- SHA256 b498ed5d6af695df10394bd0ee00045bcc9602e561d682798993d12e88389835
- MD5 a2f6b55b2a53b8e75950bcf18ed4002b
- SHA1 135ae7c98cdcdbc22929a11f35bf606cd9e08c5a
- SHA512 12147e5b19b085a4d8b3e7bda8f2906454c39c2730b98cc54a9ae7262028db1211b4299db3d996857d766df32f0ddb1f151b675cda5c523a35628ee50fb1a70f
- SSDEEP 786432:pNWZbpSLD/BhvSbzWUPK+DvELDQVxnSDXTm7:pN6b4/nEWS5DvFVNSnm
- TLSH T11A6733E81DDECF26DB83ACB18267395C91F2EC5A49645418F378F838A4B76E0D370946
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Loads dropped DLL
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Tasks
static1
Score
5/10
behavioral1
costuradiscoverypackerpersistenceprivilege_escalationransomware
Score
7/10
behavioral2
discoverypersistenceprivilege_escalationransomware
Score
7/10
behavioral3
discoverypersistenceprivilege_escalationransomware
Score
7/10
behavioral4
discoverypersistenceprivilege_escalationransomware
Score
7/10