Multiple Malware Dropped Through MSI Package

Tags

External References

• https://isc.sans.edu/
• https://otx.alienvault.com/

Description

An analysis reveals the distribution of malware through an MSI package, specifically SectopRat and Redline stealer. The malware employs techniques like executing malicious scripts, disabling security measures, and establishing persistence through scheduled tasks. It communicates with command-and-control servers located in Russia. The investigation underscores the importance of exercising caution when dealing with untrusted software packages.

Date