General
- Target Approved%20Document%23D53LU.msi
- Size 6.8MB
- Sample261030-gzedvsdd63
- SHA256 3be3e7a45994dffd41af96f3b8852674272e6dbaaca2dcd0b84296e136a9c6c5
Score
6/10
Malware Config
Targets
-
- Target Approved%20Document%23D53LU.msi
- Size 6.8MB
- SHA256 3be3e7a45994dffd41af96f3b8852674272e6dbaaca2dcd0b84296e136a9c6c5
Score6/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1System Binary Proxy Execution
1Msiexec
1