General

  • Target

    ceebe2e47c6a1704b526a980354bf62ac54cc10acbc213973500a7ed0aea0f44

  • Size

    37KB

  • Sample

    221203-e6dd2aec82

  • MD5

    cee7a6c99ae62d85fec0bd5b96de41e3

  • SHA1

    5df3e434749d6d575d2ef6e5620750fd4b150dad

  • SHA256

    ceebe2e47c6a1704b526a980354bf62ac54cc10acbc213973500a7ed0aea0f44

  • SHA512

    658f6b2b51ee9ef998299d9ab4bc6c56d9eaf89ee2ff2a12c65a23236fedb76e17bfea9533fd4526d0a1c8ab3510afda19da9447d501f8a62b487df3e2935c69

  • SSDEEP

    768:edIZ/alwuAknNWuCMQpb0ruFm1YqTrmHwbLyMyI:edILlknNU4rOobbLynI

Score
8/10

Malware Config

Targets

    • Target

      ceebe2e47c6a1704b526a980354bf62ac54cc10acbc213973500a7ed0aea0f44

    • Size

      37KB

    • MD5

      cee7a6c99ae62d85fec0bd5b96de41e3

    • SHA1

      5df3e434749d6d575d2ef6e5620750fd4b150dad

    • SHA256

      ceebe2e47c6a1704b526a980354bf62ac54cc10acbc213973500a7ed0aea0f44

    • SHA512

      658f6b2b51ee9ef998299d9ab4bc6c56d9eaf89ee2ff2a12c65a23236fedb76e17bfea9533fd4526d0a1c8ab3510afda19da9447d501f8a62b487df3e2935c69

    • SSDEEP

      768:edIZ/alwuAknNWuCMQpb0ruFm1YqTrmHwbLyMyI:edILlknNU4rOobbLynI

    Score
    8/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks