General

  • Target

    6b4f45aa2bfa11f31f408e72f1fc7f9f8cc505632d8a8f5c573c006950197271

  • Size

    5.6MB

  • Sample

    231104-nxp6xaha9w

  • MD5

    720df338a9c042ea0faa10b5402ec9cb

  • SHA1

    96ea965e48df1bcc454b75fe3bff8fc9c22b0785

  • SHA256

    6b4f45aa2bfa11f31f408e72f1fc7f9f8cc505632d8a8f5c573c006950197271

  • SHA512

    1568a6d2492b44817fee54d28b71c08d8bd74d2bae78ce128d561b4c0e4e5f25b494049cb27bb0009aa004b41484be1d3ee61a087f861e4ffb945b73ff70de35

  • SSDEEP

    98304:IiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:RRm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score
7/10

Malware Config

Targets

    • Target

      6b4f45aa2bfa11f31f408e72f1fc7f9f8cc505632d8a8f5c573c006950197271

    • Size

      5.6MB

    • MD5

      720df338a9c042ea0faa10b5402ec9cb

    • SHA1

      96ea965e48df1bcc454b75fe3bff8fc9c22b0785

    • SHA256

      6b4f45aa2bfa11f31f408e72f1fc7f9f8cc505632d8a8f5c573c006950197271

    • SHA512

      1568a6d2492b44817fee54d28b71c08d8bd74d2bae78ce128d561b4c0e4e5f25b494049cb27bb0009aa004b41484be1d3ee61a087f861e4ffb945b73ff70de35

    • SSDEEP

      98304:IiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:RRm1syxacY48eda2TMpQdZ9nc+fyhNjG

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks