General

  • Target

    fe31bbef25b78151b38b36459138c201d1c6c00b031cf5f7d70f624f6eaa1737

  • Size

    5.6MB

  • Sample

    231104-jkz35adb2v

  • MD5

    16380133e4864dbfebd8f96dba1c4314

  • SHA1

    2130fec7755eda0e6b7e91f86c5cd48bc988cefd

  • SHA256

    fe31bbef25b78151b38b36459138c201d1c6c00b031cf5f7d70f624f6eaa1737

  • SHA512

    1209c5d5df149ed3639483a936a0714bf0d3e73acd3d00093bd4d0bdb3fa0cb91f76b82ebb9986ad59b7da48d4ca38d51c97ec6eb00d9f9a4c7f2e9f9ea62f85

  • SSDEEP

    98304:diRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:ERm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score
7/10

Malware Config

Targets

    • Target

      fe31bbef25b78151b38b36459138c201d1c6c00b031cf5f7d70f624f6eaa1737

    • Size

      5.6MB

    • MD5

      16380133e4864dbfebd8f96dba1c4314

    • SHA1

      2130fec7755eda0e6b7e91f86c5cd48bc988cefd

    • SHA256

      fe31bbef25b78151b38b36459138c201d1c6c00b031cf5f7d70f624f6eaa1737

    • SHA512

      1209c5d5df149ed3639483a936a0714bf0d3e73acd3d00093bd4d0bdb3fa0cb91f76b82ebb9986ad59b7da48d4ca38d51c97ec6eb00d9f9a4c7f2e9f9ea62f85

    • SSDEEP

      98304:diRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:ERm1syxacY48eda2TMpQdZ9nc+fyhNjG

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks