General

  • Target

    cf4e52090589b9ba9c648e8c6f01970b26a430a4a6f6031aef34d77fb0bc6d2c

  • Size

    5.4MB

  • Sample

    231101-1r5evsfc72

  • MD5

    de6e05b7699a1240c502428e4486ebaa

  • SHA1

    0f8cc7935b5a689c75d884293ce337fae692701f

  • SHA256

    cf4e52090589b9ba9c648e8c6f01970b26a430a4a6f6031aef34d77fb0bc6d2c

  • SHA512

    099faa88df52d7ea5e5e3665bec274f1a30ab864485eb978aa7faa824abd8bb14a6be2fd71eaf0f2de02d88f8c2a5d2ed7bf3864f7a5a95c849b14c10656c285

  • SSDEEP

    98304:eie6mJYuFXsV3Zw1abnjaDHHTgcT6T4NqDrHSo+PJEN+RV5+hpz:rnmyueNZwVDHHTgn4NO/WS25Az

Score
7/10

Malware Config

Targets

    • Target

      cf4e52090589b9ba9c648e8c6f01970b26a430a4a6f6031aef34d77fb0bc6d2c

    • Size

      5.4MB

    • MD5

      de6e05b7699a1240c502428e4486ebaa

    • SHA1

      0f8cc7935b5a689c75d884293ce337fae692701f

    • SHA256

      cf4e52090589b9ba9c648e8c6f01970b26a430a4a6f6031aef34d77fb0bc6d2c

    • SHA512

      099faa88df52d7ea5e5e3665bec274f1a30ab864485eb978aa7faa824abd8bb14a6be2fd71eaf0f2de02d88f8c2a5d2ed7bf3864f7a5a95c849b14c10656c285

    • SSDEEP

      98304:eie6mJYuFXsV3Zw1abnjaDHHTgcT6T4NqDrHSo+PJEN+RV5+hpz:rnmyueNZwVDHHTgn4NO/WS25Az

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks