General

  • Target

    9d9c9cec06a85870535a69a511cbabde7423ea88bcb65e95f16b3b8e9273fb10

  • Size

    5.6MB

  • Sample

    231103-zhbwhsab2t

  • MD5

    28a261a6c78a3d759a7c2456ed7af90b

  • SHA1

    f039dcf46a3288f75c74a3c418b99be9d6473661

  • SHA256

    9d9c9cec06a85870535a69a511cbabde7423ea88bcb65e95f16b3b8e9273fb10

  • SHA512

    cbdaff93d60608236ff56bfc2d3d74160a0bade40f192f5a239d639052615fa2ed957a848bc0af2d7f699df13f835eba637649d0583b287c40396e75b1685cb8

  • SSDEEP

    98304:GiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:jRm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score
7/10

Malware Config

Targets

    • Target

      9d9c9cec06a85870535a69a511cbabde7423ea88bcb65e95f16b3b8e9273fb10

    • Size

      5.6MB

    • MD5

      28a261a6c78a3d759a7c2456ed7af90b

    • SHA1

      f039dcf46a3288f75c74a3c418b99be9d6473661

    • SHA256

      9d9c9cec06a85870535a69a511cbabde7423ea88bcb65e95f16b3b8e9273fb10

    • SHA512

      cbdaff93d60608236ff56bfc2d3d74160a0bade40f192f5a239d639052615fa2ed957a848bc0af2d7f699df13f835eba637649d0583b287c40396e75b1685cb8

    • SSDEEP

      98304:GiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:jRm1syxacY48eda2TMpQdZ9nc+fyhNjG

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks