General

  • Target

    992639239270d5df5db7f14c21788f8c20376c497620dec3ad0c074eb644834a

  • Size

    5.6MB

  • Sample

    231104-rmda5sdc44

  • MD5

    cf0940feab62d725a7c8abb14ee6b8cd

  • SHA1

    bac0e1426d393d9bdeb5756a939d143d917b2eb2

  • SHA256

    992639239270d5df5db7f14c21788f8c20376c497620dec3ad0c074eb644834a

  • SHA512

    be0bb3e7f550192061e69cf83cfcddb2450ff02e07a0ccfd4d63fa3b2bcd05b96de69b186fb2fc19cf950b9db60ddfdd0336010ab8d4ea067b5499ec74ab7722

  • SSDEEP

    98304:1iRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:sRm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score
7/10

Malware Config

Targets

    • Target

      992639239270d5df5db7f14c21788f8c20376c497620dec3ad0c074eb644834a

    • Size

      5.6MB

    • MD5

      cf0940feab62d725a7c8abb14ee6b8cd

    • SHA1

      bac0e1426d393d9bdeb5756a939d143d917b2eb2

    • SHA256

      992639239270d5df5db7f14c21788f8c20376c497620dec3ad0c074eb644834a

    • SHA512

      be0bb3e7f550192061e69cf83cfcddb2450ff02e07a0ccfd4d63fa3b2bcd05b96de69b186fb2fc19cf950b9db60ddfdd0336010ab8d4ea067b5499ec74ab7722

    • SSDEEP

      98304:1iRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:sRm1syxacY48eda2TMpQdZ9nc+fyhNjG

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks