98d70ba57f470df522aca90f49ac112412353900ed9242f131a79bc8c4d5be2d | Triage

Sharing

General

Target

98d70ba57f470df522aca90f49ac112412353900ed9242f131a79bc8c4d5be2d
Size

361KB
Sample

221202-z2rfbaeb99
MD5

39695f6fd6d15439e921ec318b7faede
SHA1

4f817c4611fbc0e6d52e252411a785d85c37c2da
SHA256

98d70ba57f470df522aca90f49ac112412353900ed9242f131a79bc8c4d5be2d
SHA512

3930792f714b2bb6f25b2f90692e33091258f3914e14ccb147c43e90b027247ba333e921c52051929eb1f489f9f2e3cc5b70826fc1597871ee0235e60e6a1838
SSDEEP

6144:GflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:GflfAsiVGjSGecvX

Score

8^/10

Malware Config

Targets

- Target
  
  98d70ba57f470df522aca90f49ac112412353900ed9242f131a79bc8c4d5be2d
- Size
  
  361KB
- MD5
  
  39695f6fd6d15439e921ec318b7faede
- SHA1
  
  4f817c4611fbc0e6d52e252411a785d85c37c2da
- SHA256
  
  98d70ba57f470df522aca90f49ac112412353900ed9242f131a79bc8c4d5be2d
- SHA512
  
  3930792f714b2bb6f25b2f90692e33091258f3914e14ccb147c43e90b027247ba333e921c52051929eb1f489f9f2e3cc5b70826fc1597871ee0235e60e6a1838
- SSDEEP
  
  6144:GflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:GflfAsiVGjSGecvX
Score

8^/10
- Executes dropped EXE
- Loads dropped DLL
- Unexpected DNS network traffic destination
  Network traffic to other servers than the configured DNS servers was detected on the DNS port.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Command-Line Interface

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2