Overview

overview

10

Static

static

5

msInstall.exe

windows10-2004-x64

10

msInstall.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    6b1452a683b2b6e1bbab7a436e7a8db71ff4a8d32d6fc5a85b57b6ca5f5b1d8f
  • Size 6.5MB
  • Sample260925-mn2mxazvgv
  • SHA256 6b1452a683b2b6e1bbab7a436e7a8db71ff4a8d32d6fc5a85b57b6ca5f5b1d8f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
beapydiscoveryexecutionminerworm

Malware Config

Targets

    • Target
      msInstall.exe
    • Size 6.6MB
    • SHA256 5f8e17be2e73138c40cea6a8f018f1a79e1c14958893568b3497a38f358332d4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoveryexecutionbeapyminerworm

    • Family: Beapy

      Beapy is a python worm with crypto mining capabilities.

      minerwormbeapy

    • Contacts a large (6881) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Grants admin privileges

      Uses net.exe to modify the user's privileges.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks