General

  • Target

    09c80fad77422d99307cd5af48bd80e84ae821109119d8ca5f52c019dcffb7b6

  • Size

    5.6MB

  • Sample

    231104-pfcpxshf71

  • MD5

    b4398e05f1a8b794c173c0fc0a30a0dc

  • SHA1

    5142baa63496c0c1ce6362e48f0094a63d9f6039

  • SHA256

    09c80fad77422d99307cd5af48bd80e84ae821109119d8ca5f52c019dcffb7b6

  • SHA512

    0f0998c23332fc89ed0c91b90e463135738cad92648b26d4a85f44f43e3d14b65eb0b518af31a19e5d65aa1def1d1380894e15e87f797decaa5a313f7dc28030

  • SSDEEP

    98304:HiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:CRm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score
7/10

Malware Config

Targets

    • Target

      09c80fad77422d99307cd5af48bd80e84ae821109119d8ca5f52c019dcffb7b6

    • Size

      5.6MB

    • MD5

      b4398e05f1a8b794c173c0fc0a30a0dc

    • SHA1

      5142baa63496c0c1ce6362e48f0094a63d9f6039

    • SHA256

      09c80fad77422d99307cd5af48bd80e84ae821109119d8ca5f52c019dcffb7b6

    • SHA512

      0f0998c23332fc89ed0c91b90e463135738cad92648b26d4a85f44f43e3d14b65eb0b518af31a19e5d65aa1def1d1380894e15e87f797decaa5a313f7dc28030

    • SSDEEP

      98304:HiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:CRm1syxacY48eda2TMpQdZ9nc+fyhNjG

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks