Overview

overview

6

Static

static

1

chromeremo...st.msi

windows11-21h2-x64

6

Resubmissions

29-06-2024 08:55

240629-kvv3laxdmn 6

28-06-2024 08:26

240628-kb466azdng 7

28-06-2024 04:33

240628-e6m88s1fkc 6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    chromeremotedesktophost.msi

  • Size

    20.5MB

  • Sample

    240629-kvv3laxdmn

  • MD5

    5f259c755b3dcbbbbc27f9513cddac61

  • SHA1

    0e672bad7b67cc1f234b265f3af21976935c4903

  • SHA256

    9cdd681fc86c1e816e652b0b5590d2e986b08bc26204e8048918a59c291051ce

  • SHA512

    4c7f66962cecba4e753f3c996cc45bd102c6b7c6ab97bf85197091cfdb05ca82dd400f0888ead82927c61e3f45ea33e919a3a51da63cb5af1141a980f779fcb3

  • SSDEEP

    393216:CQzX7/PFKRpAvIpgY6KKsIHNHSHY7nTMkJ5K6cOomwZCtgO5gAkUmZbXF:tzX7/cTHAK1uASTMkboRCtgO1kUmZbX

Score
6/10
executionpersistenceprivilege_escalation

Malware Config

Targets

    • Target

      chromeremotedesktophost.msi

    • Size

      20.5MB

    • MD5

      5f259c755b3dcbbbbc27f9513cddac61

    • SHA1

      0e672bad7b67cc1f234b265f3af21976935c4903

    • SHA256

      9cdd681fc86c1e816e652b0b5590d2e986b08bc26204e8048918a59c291051ce

    • SHA512

      4c7f66962cecba4e753f3c996cc45bd102c6b7c6ab97bf85197091cfdb05ca82dd400f0888ead82927c61e3f45ea33e919a3a51da63cb5af1141a980f779fcb3

    • SSDEEP

      393216:CQzX7/PFKRpAvIpgY6KKsIHNHSHY7nTMkJ5K6cOomwZCtgO5gAkUmZbXF:tzX7/cTHAK1uASTMkboRCtgO1kUmZbX

    Score
    6/10
    executionpersistenceprivilege_escalation

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Command and Scripting Interpreter

1
T1059

PowerShell

1
T1059.001

Persistence

Event Triggered Execution

2
T1546

Accessibility Features

1
T1546.008

Installer Packages

1
T1546.016

Privilege Escalation

Event Triggered Execution

2
T1546

Accessibility Features

1
T1546.008

Installer Packages

1
T1546.016

Defense Evasion

Credential Access

Discovery

Query Registry

3
T1012

Peripheral Device Discovery

2
T1120

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks