General

  • Target

    ebcd74c99eb3649977bb3e35ddd499b3e699b5613e2ce9db8bef02f16c41d5bc

  • Size

    5.4MB

  • Sample

    231102-cnxzlsfb9w

  • MD5

    bb7256c3ddf7f7f2772b6b5ecf44a41c

  • SHA1

    20ef0733817cfd47026b37e2da45f0e926457459

  • SHA256

    ebcd74c99eb3649977bb3e35ddd499b3e699b5613e2ce9db8bef02f16c41d5bc

  • SHA512

    1cab84594fe227d152a7741755f9aa780ed8941619bb87ba4b785fa89a4c0f940c5e3322187374d10e7d020a0a939d1204f3e9226055b89d76a93c0ca852059a

  • SSDEEP

    98304:Qie6mJYuFXsV3Zw1abnjaDHHTgcT6T4NqDrHSo+PJEN+RV5+hpz:JnmyueNZwVDHHTgn4NO/WS25Az

Score
7/10

Malware Config

Targets

    • Target

      ebcd74c99eb3649977bb3e35ddd499b3e699b5613e2ce9db8bef02f16c41d5bc

    • Size

      5.4MB

    • MD5

      bb7256c3ddf7f7f2772b6b5ecf44a41c

    • SHA1

      20ef0733817cfd47026b37e2da45f0e926457459

    • SHA256

      ebcd74c99eb3649977bb3e35ddd499b3e699b5613e2ce9db8bef02f16c41d5bc

    • SHA512

      1cab84594fe227d152a7741755f9aa780ed8941619bb87ba4b785fa89a4c0f940c5e3322187374d10e7d020a0a939d1204f3e9226055b89d76a93c0ca852059a

    • SSDEEP

      98304:Qie6mJYuFXsV3Zw1abnjaDHHTgcT6T4NqDrHSo+PJEN+RV5+hpz:JnmyueNZwVDHHTgn4NO/WS25Az

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks