General

  • Target

    ea9fb3a20eb4073a670f1e6b213f9de955f331c514478ce78fa46fd2801eb836

  • Size

    5.6MB

  • Sample

    231103-ywzn3ahg3v

  • MD5

    45da9aabd6769b8e503c73c27b6735fa

  • SHA1

    c5bcc5ae9e0344ed4d57802d246b5eb244e86b7a

  • SHA256

    ea9fb3a20eb4073a670f1e6b213f9de955f331c514478ce78fa46fd2801eb836

  • SHA512

    3bb4ccf4d7510cc600d05d575b7d6983ed64486f1e6a5549f79a074d57b04e7cc57da69704474000731ceaa1525ba882579d59e6c5a1b215b226f40169264be4

  • SSDEEP

    98304:JiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:YRm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score
7/10

Malware Config

Targets

    • Target

      ea9fb3a20eb4073a670f1e6b213f9de955f331c514478ce78fa46fd2801eb836

    • Size

      5.6MB

    • MD5

      45da9aabd6769b8e503c73c27b6735fa

    • SHA1

      c5bcc5ae9e0344ed4d57802d246b5eb244e86b7a

    • SHA256

      ea9fb3a20eb4073a670f1e6b213f9de955f331c514478ce78fa46fd2801eb836

    • SHA512

      3bb4ccf4d7510cc600d05d575b7d6983ed64486f1e6a5549f79a074d57b04e7cc57da69704474000731ceaa1525ba882579d59e6c5a1b215b226f40169264be4

    • SSDEEP

      98304:JiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:YRm1syxacY48eda2TMpQdZ9nc+fyhNjG

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks