General
- Target Sib6Setup (1).msi
- Size 5.8MB
- Sample261024-s71slsvxev
- SHA256 60e191a6880b6544ce7350a56711aade426d5b2ee6a0b9f283ecc8caf7a04484
Score
6/10
Malware Config
Targets
-
- Target Sib6Setup (1).msi
- Size 5.8MB
- SHA256 60e191a6880b6544ce7350a56711aade426d5b2ee6a0b9f283ecc8caf7a04484
Score6/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks for any installed AV software in registry
-
Downloads MZ/PE file
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Peripheral Device Discovery
2Query Registry
4Software Discovery
1Security Software Discovery
1System Information Discovery
4System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1System Time Discovery
1