General

  • Target

    0a556cae58e0ffc02ebfe7be0e913dd9220639b175e36b0371cbace2cea4d72c

  • Size

    5.4MB

  • Sample

    231103-esrz9sbh8z

  • MD5

    0487a0d8198048dbbeb0bf9793f02aef

  • SHA1

    1fe039fbcd319a4296924cfa16f1dd9a0d621e9c

  • SHA256

    0a556cae58e0ffc02ebfe7be0e913dd9220639b175e36b0371cbace2cea4d72c

  • SHA512

    b86ef84947e0394b27bb8460021a2e08d218514bcff94b92f9aab64f66663a98c5d9ef4fa7ed089dccd1a917fab9d1cfc2a5c0e2e78e79246e2a240ccf9d6734

  • SSDEEP

    98304:pd5QnY1PB46ww2V2niT/qZofuIu8otdOpcQ/fTX/e4P8bVy2ZS3YfURpbXEheZ7e:75AY1PB46iLHvu82dOpcQ/7XG4P8bU2R

Score
7/10

Malware Config

Targets

    • Target

      0a556cae58e0ffc02ebfe7be0e913dd9220639b175e36b0371cbace2cea4d72c

    • Size

      5.4MB

    • MD5

      0487a0d8198048dbbeb0bf9793f02aef

    • SHA1

      1fe039fbcd319a4296924cfa16f1dd9a0d621e9c

    • SHA256

      0a556cae58e0ffc02ebfe7be0e913dd9220639b175e36b0371cbace2cea4d72c

    • SHA512

      b86ef84947e0394b27bb8460021a2e08d218514bcff94b92f9aab64f66663a98c5d9ef4fa7ed089dccd1a917fab9d1cfc2a5c0e2e78e79246e2a240ccf9d6734

    • SSDEEP

      98304:pd5QnY1PB46ww2V2niT/qZofuIu8otdOpcQ/fTX/e4P8bVy2ZS3YfURpbXEheZ7e:75AY1PB46iLHvu82dOpcQ/7XG4P8bU2R

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks