General
- Target MAX.msi
- Size 245.9MB
- Sample261102-mxqxrssxcs
- SHA256 d1028851e71218c341a94e97118accca846a99aa4324bae151a56b37ca791853
- MD5 8b506f31fcf0027402b7d78e1019cab2
- SHA1 1acb68f1811196e7b31d7317fbfa9341c00c3add
- SHA512 f1e735fcadd16a29943b5093c77a1c596a0ce43ef14ead8068d710724a300b9a135071d9c2bb7c582da9659b8b848032dfb4d582a3aff16f7ceb473d0be95e96
- SSDEEP 6291456:+7Sl9mfZNYwtlD2/Qit54wXJgJ1u52DLLw7qHk6p0gSf3:+7MIFJ1u52DLLH3q3
- TLSH T190C833A56E48626BD0BB533D61621F8189727D90E32241DB72BC71893EF35C0A7F3687
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
MAX.msi
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
MAX.msi
Resource
win10ltsc2021-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral3
Sample
MAX.msi
Resource
win11-20260911-en
21 signatures
150 seconds
Behavioral task
behavioral4
Sample
MAX.msi
Resource
win11ltsc2024-20260911-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target MAX.msi
- Size 245.9MB
- SHA256 d1028851e71218c341a94e97118accca846a99aa4324bae151a56b37ca791853
- MD5 8b506f31fcf0027402b7d78e1019cab2
- SHA1 1acb68f1811196e7b31d7317fbfa9341c00c3add
- SHA512 f1e735fcadd16a29943b5093c77a1c596a0ce43ef14ead8068d710724a300b9a135071d9c2bb7c582da9659b8b848032dfb4d582a3aff16f7ceb473d0be95e96
- SSDEEP 6291456:+7Sl9mfZNYwtlD2/Qit54wXJgJ1u52DLLw7qHk6p0gSf3:+7MIFJ1u52DLLH3q3
- TLSH T190C833A56E48626BD0BB533D61621F8189727D90E32241DB72BC71893EF35C0A7F3687
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Tasks
static1
Score
1/10
behavioral1
defense_evasiondiscoverypersistenceprivilege_escalationransomware
Score
6/10
behavioral2
defense_evasiondiscoverypersistenceprivilege_escalationransomware
Score
6/10
behavioral3
defense_evasiondiscoverypersistenceprivilege_escalationransomware
Score
6/10
behavioral4
defense_evasiondiscoverypersistenceprivilege_escalationransomware
Score
6/10