General

  • Target

    f1c6c2d8c3a37dd08018f8f7ed8de2c9cc1d4a52b7c8f59a2c5c043982d6080e

  • Size

    5.6MB

  • Sample

    231104-krf49sgc79

  • MD5

    341dd3625ebc3b08cd0a966b29f5210f

  • SHA1

    518f0fd0d306eafd3ff57fb0a492e605aa8e4d13

  • SHA256

    f1c6c2d8c3a37dd08018f8f7ed8de2c9cc1d4a52b7c8f59a2c5c043982d6080e

  • SHA512

    e10fac6a8e361ef176ff48dafda4b5837425521ad3d3e4b97bf0ff94c0db0aa71de0a18e4dc9cfcf89adb1d8439a143585f01a813cc69edb41081795261d7deb

  • SSDEEP

    98304:7iRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:eRm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score
7/10

Malware Config

Targets

    • Target

      f1c6c2d8c3a37dd08018f8f7ed8de2c9cc1d4a52b7c8f59a2c5c043982d6080e

    • Size

      5.6MB

    • MD5

      341dd3625ebc3b08cd0a966b29f5210f

    • SHA1

      518f0fd0d306eafd3ff57fb0a492e605aa8e4d13

    • SHA256

      f1c6c2d8c3a37dd08018f8f7ed8de2c9cc1d4a52b7c8f59a2c5c043982d6080e

    • SHA512

      e10fac6a8e361ef176ff48dafda4b5837425521ad3d3e4b97bf0ff94c0db0aa71de0a18e4dc9cfcf89adb1d8439a143585f01a813cc69edb41081795261d7deb

    • SSDEEP

      98304:7iRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:eRm1syxacY48eda2TMpQdZ9nc+fyhNjG

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks