Nf_210923564 (1).msi
Classification: Malicious
Nf_210923564 (1).msi is a malicious file sample (Windows installer, 675.0 KB). Linked to Metamorfo malware.
Detection summary
- 0 antivirus detections (54% detection ratio)
- 0 IDS alerts
- 8 processes observed
- 1 contacted hosts
- 1 DNS requests
MITRE ATT&CK associations
Malware families: METAMORFO (S0455)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2023-10-24 03:15:03 | 2023-10-24 05:30:10 | ||
| Metamorfo | MalwareBazaar Abuse.ch | 2023-09-22 07:24:08 | 2023-09-22 07:24:08 | malicious-activity | S0455 Metamorfo |
Sample information
- Filenames
- efaef34ef28217ed3b4d1066bc2c96354bba13d5399d9779ec58801fa72b7a99.msi, Nf_210923564 (1).msi
- File type
- application/x-msi
- Size
- 691200 bytes
- MD5
0987e1b1412f555a22fc4a0b36baa98a- SHA-1
17f692483b542e0a7cdf04547760a63aa9f59708- SHA-256
efaef34ef28217ed3b4d1066bc2c96354bba13d5399d9779ec58801fa72b7a99- First indexed
- 2023-09-22 09:19:23
- Last updated
- 2024-09-21 15:05:36
Network contacts
DNS requests
Process list
| Name | Command line |
|---|---|
| msiexec.exe | /i "C:\efaef34ef28217ed3b4d1066bc2c96354bba13d5399d9779ec58801fa72b7a99.msi" |
| msiexec.exe | /V |
| MsiExec.exe | -Embedding 14929DF3C63EE9A7044713B6EA814062 |
| cmd.exe | /c ""%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\cubobretas.cmd" " |
| cmd.exe | cmd /min /C REG ADD "HKCU\Control Panel\Desktop" /v Win8DpiScaling /t REG_DWORD /d 0x00000001 /f |
| reg.exe | REG ADD "HKCU\Control Panel\Desktop" /v Win8DpiScaling /t REG_DWORD /d 0x00000001 /f |
| cmd.exe | cmd /min /C REG ADD "HKCU\Control Panel\Desktop" /v LogPixels /t REG_DWORD /d 0x00000060 /f |
| reg.exe | REG ADD "HKCU\Control Panel\Desktop" /v LogPixels /t REG_DWORD /d 0x00000060 /f |