General
- Target Event_invitation.msi
- Size 744KB
- Sample260812-cntbesgr3w
- SHA256 4970f296fbabe698fa07bd0d98635054ab022ab35cc7b1c5a327c488fe282c03
- MD5 a8b1aa7649fc47ce8eb3444fa677666a
- SHA1 67b33a4651e0f0b1b3ef8d7dbec4e8aef4de12f5
- SHA512 1d55af17e84804e5262cbf6efe6f3299fc110cb3d0971daf17f419cd312ca96f5c2819a2a65006ac274844d22e43d9aa085dae69c467c6a2b6e7363f8bf6718b
- SSDEEP 12288:sRsNW7ehwj4lkauPx5Ki7BvmZGRiTll0UlKLElxOqAXuiieFkgRuvxUSHwi7BvmC:syNW7nvUAW1lKwPOvfcvUnGJJulXvU
- TLSH T13EF4CF117640C436C2B70A365669C6641A7EFC306E618A9B73C43F7EEE317C1AA24B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Event_invitation.msi
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
Event_invitation.msi
Resource
win11ltsc2024-20260709-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target Event_invitation.msi
- Size 744KB
- SHA256 4970f296fbabe698fa07bd0d98635054ab022ab35cc7b1c5a327c488fe282c03
- MD5 a8b1aa7649fc47ce8eb3444fa677666a
- SHA1 67b33a4651e0f0b1b3ef8d7dbec4e8aef4de12f5
- SHA512 1d55af17e84804e5262cbf6efe6f3299fc110cb3d0971daf17f419cd312ca96f5c2819a2a65006ac274844d22e43d9aa085dae69c467c6a2b6e7363f8bf6718b
- SSDEEP 12288:sRsNW7ehwj4lkauPx5Ki7BvmZGRiTll0UlKLElxOqAXuiieFkgRuvxUSHwi7BvmC:syNW7nvUAW1lKwPOvfcvUnGJJulXvU
- TLSH T13EF4CF117640C436C2B70A365669C6641A7EFC306E618A9B73C43F7EEE317C1AA24B77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1System Binary Proxy Execution
1Msiexec
1