General
- Target MyDevAgent-Studio-Setup.exe
- Size 166.7MB
- Sample260925-1sgp7axeph
- SHA256 5061e67c4ee992c29efe8c06bab7f293f8f06c2d5ad305b4e3da11317e6ee79e
- MD5 b859f2b332f037232131698e7f21a1bf
- SHA1 d9d0cb7350ba9a20bcdbe8cfda5a3d5469312147
- SHA512 d72956b327d9b0173551bc18e707068e2a14171d7d2b0f72f408a655b5b7b28d869e7295170eac296339f217333a26d85437783e71e52f04c1beb30391086d61
- SSDEEP 3145728:MUGEU0knDeHWi0u91LSpmP97Vx9ZEqJnxIRz5LpuftHEV/Oavq:fbknIwu3LSpGJz9emnxspLQaC
- TLSH T10F8833AF659BB07EE1BD1B323AB3D465807F2B30516E0D5646D4C89CCB194B01A3EF1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
exe.dropper
https://github.com/giovannisantorofrancesco2011-arch/MyDevAgent
Targets
-
- Target MyDevAgent-Studio-Setup.exe
- Size 166.7MB
- SHA256 5061e67c4ee992c29efe8c06bab7f293f8f06c2d5ad305b4e3da11317e6ee79e
- MD5 b859f2b332f037232131698e7f21a1bf
- SHA1 d9d0cb7350ba9a20bcdbe8cfda5a3d5469312147
- SHA512 d72956b327d9b0173551bc18e707068e2a14171d7d2b0f72f408a655b5b7b28d869e7295170eac296339f217333a26d85437783e71e52f04c1beb30391086d61
- SSDEEP 3145728:MUGEU0knDeHWi0u91LSpmP97Vx9ZEqJnxIRz5LpuftHEV/Oavq:fbknIwu3LSpGJz9emnxspLQaC
- TLSH T10F8833AF659BB07EE1BD1B323AB3D465807F2B30516E0D5646D4C89CCB194B01A3EF1A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1