General

  • Target

    640c6fc0a1d5fcfc7b8485ea2eee124acb82e95ce879fe0301283abcbfb5ef69

  • Size

    4.8MB

  • Sample

    231104-cwat2sdh53

  • MD5

    70bcb644a296d93a0e922ea87b461306

  • SHA1

    87677964f0c03736844f05677de52e3ab53e2240

  • SHA256

    640c6fc0a1d5fcfc7b8485ea2eee124acb82e95ce879fe0301283abcbfb5ef69

  • SHA512

    8a592faa06ddff66ebab20f8c5368a5dca0ebf75a4672dbb06adb9bcda25eb95809b4899967ac0e6850c38247eee56290a9c12d1360340121cc8715a37668af3

  • SSDEEP

    98304:6dhqCN2wunfeJx0lXzutWSb2cA6l5j5Z5Z1y/eOn4Od4chFFd57e:mhqO2lGf02qjej5fZsT4OOsd57e

Score
7/10

Malware Config

Targets

    • Target

      640c6fc0a1d5fcfc7b8485ea2eee124acb82e95ce879fe0301283abcbfb5ef69

    • Size

      4.8MB

    • MD5

      70bcb644a296d93a0e922ea87b461306

    • SHA1

      87677964f0c03736844f05677de52e3ab53e2240

    • SHA256

      640c6fc0a1d5fcfc7b8485ea2eee124acb82e95ce879fe0301283abcbfb5ef69

    • SHA512

      8a592faa06ddff66ebab20f8c5368a5dca0ebf75a4672dbb06adb9bcda25eb95809b4899967ac0e6850c38247eee56290a9c12d1360340121cc8715a37668af3

    • SSDEEP

      98304:6dhqCN2wunfeJx0lXzutWSb2cA6l5j5Z5Z1y/eOn4Od4chFFd57e:mhqO2lGf02qjej5fZsT4OOsd57e

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks