General
- Target ATTConfiguration.msi
- Size 24.0MB
- Sample261102-w1m5qacv21
- SHA256 df0c16a210222da4f4758d6df87af84803c85360d0a551ef9fbe583209af37a0
- MD5 907e9fe9330b9308de602d9fc34a280e
- SHA1 10a019b05a8737d5d84dd46cd31c8102fc8c783c
- SHA512 74e5457ad57b6c8e0b1e000219c0d54ec7ee62f661363d3e95dfa64720738a883f8384403eaaca9f91a9d211972a59af21e2e4afa364d94f6c8c75103e3e28fa
- SSDEEP 196608:yLFHunAySzm0fcycyqYCt0vHAeNI4iE5SUlYyepj5uPAIXdzBGkTFXK4VNMoR1NT:UFHqA5ehqAgizUlHNwgXlVNMoR1Npx
- TLSH T18847C06B71E4816DC16FC27EC5A78F44EA3370B51B36D2EB539042A92F12AD45E3E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ATTConfiguration.msi
Resource
win10v2004-20260911-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
ATTConfiguration.msi
Resource
win11ltsc2024-20260911-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target ATTConfiguration.msi
- Size 24.0MB
- SHA256 df0c16a210222da4f4758d6df87af84803c85360d0a551ef9fbe583209af37a0
- MD5 907e9fe9330b9308de602d9fc34a280e
- SHA1 10a019b05a8737d5d84dd46cd31c8102fc8c783c
- SHA512 74e5457ad57b6c8e0b1e000219c0d54ec7ee62f661363d3e95dfa64720738a883f8384403eaaca9f91a9d211972a59af21e2e4afa364d94f6c8c75103e3e28fa
- SSDEEP 196608:yLFHunAySzm0fcycyqYCt0vHAeNI4iE5SUlYyepj5uPAIXdzBGkTFXK4VNMoR1NT:UFHqA5ehqAgizUlHNwgXlVNMoR1Npx
- TLSH T18847C06B71E4816DC16FC27EC5A78F44EA3370B51B36D2EB539042A92F12AD45E3E321
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1System Binary Proxy Execution
1Msiexec
1