General

  • Target
    360-1-124-37782-0.zip
  • Size 21.8MB
  • Sample260910-amxakscj2v
  • SHA256 69a8317598d78256fbdb7ec25c2cd514e134515a64979b0a6bc8f9e201e018f1
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Articulate.360.Package.msi
    • Size 22.3MB
    • SHA256 57ca339d56ee3acd182ec26ee55ece429ce102acf4dad8c014eb0d16f01943ff
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Checks whether UAC is enabled

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks