Overview

overview

10

Static

static

trehjugdr4et6u.msi

windows7_x64

10

trehjugdr4et6u.msi

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    trehjugdr4et6u.msi
  • Size 548KB
  • Sample211007-sdchxscgfj
  • SHA256 a69d27abd043cc676095f71300bf6b2368167536fcd4fe5342cf79a7e94fc2fe
  • MD5 SHA1 SHA512
Score
10/10
persistencesuricata

Malware Config

Targets

    • Target
      trehjugdr4et6u.msi
    • Size 548KB
    • SHA256 a69d27abd043cc676095f71300bf6b2368167536fcd4fe5342cf79a7e94fc2fe
    • MD5 SHA1 SHA512
    Score
    10/10
    persistencesuricata

    • suricata: ET MALWARE MirrorBlast CnC Activity M2

      suricata: ET MALWARE MirrorBlast CnC Activity M2

      suricata

    • suricata: ET MALWARE MirrorBlast CnC Activity M3

      suricata: ET MALWARE MirrorBlast CnC Activity M3

      suricata

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks