General

  • Target

    38b44fa30c4d963967c37183d7a9e2582a730c7663432868c3abea47530015f8

  • Size

    5.6MB

  • Sample

    231103-ymyemsbf29

  • MD5

    661b2b3347fa95ba2744435ec2d3a20e

  • SHA1

    49d22d22bc9b5f1754f6114e8be8279291bad7ae

  • SHA256

    38b44fa30c4d963967c37183d7a9e2582a730c7663432868c3abea47530015f8

  • SHA512

    ba652099689268f8a6e1ea8c52c4c1da173c89b5867f95f479b24f1b7a033be5b57afa43f5472ccf5eb4e266aadef3902e81c29a8d1852f8f497d97646f0924f

  • SSDEEP

    98304:1iRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:sRm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score
7/10

Malware Config

Targets

    • Target

      38b44fa30c4d963967c37183d7a9e2582a730c7663432868c3abea47530015f8

    • Size

      5.6MB

    • MD5

      661b2b3347fa95ba2744435ec2d3a20e

    • SHA1

      49d22d22bc9b5f1754f6114e8be8279291bad7ae

    • SHA256

      38b44fa30c4d963967c37183d7a9e2582a730c7663432868c3abea47530015f8

    • SHA512

      ba652099689268f8a6e1ea8c52c4c1da173c89b5867f95f479b24f1b7a033be5b57afa43f5472ccf5eb4e266aadef3902e81c29a8d1852f8f497d97646f0924f

    • SSDEEP

      98304:1iRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:sRm1syxacY48eda2TMpQdZ9nc+fyhNjG

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks