General

  • Target

    1aa961d95178f06a682f4eaa9a8a49d1dee23b93cb49f232a0f243a68ae5e9e9

  • Size

    5.6MB

  • Sample

    231105-c3plsahg3t

  • MD5

    ccb8fc4e204eb9a6ccc82e22126d00af

  • SHA1

    db1e28e7ce9a1718b70d03d9b8b0816418c6f3d8

  • SHA256

    1aa961d95178f06a682f4eaa9a8a49d1dee23b93cb49f232a0f243a68ae5e9e9

  • SHA512

    e7398fa4a3e89fb71dd3bc3f87a08e7861b2e62b47d05150f5ce0e587f09a2cfd03ed81325a8fc8a0d6a9bd156b57dc63606b0c3b8c74046f5559f0122a7becd

  • SSDEEP

    98304:SiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:XRm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score
7/10

Malware Config

Targets

    • Target

      1aa961d95178f06a682f4eaa9a8a49d1dee23b93cb49f232a0f243a68ae5e9e9

    • Size

      5.6MB

    • MD5

      ccb8fc4e204eb9a6ccc82e22126d00af

    • SHA1

      db1e28e7ce9a1718b70d03d9b8b0816418c6f3d8

    • SHA256

      1aa961d95178f06a682f4eaa9a8a49d1dee23b93cb49f232a0f243a68ae5e9e9

    • SHA512

      e7398fa4a3e89fb71dd3bc3f87a08e7861b2e62b47d05150f5ce0e587f09a2cfd03ed81325a8fc8a0d6a9bd156b57dc63606b0c3b8c74046f5559f0122a7becd

    • SSDEEP

      98304:SiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:XRm1syxacY48eda2TMpQdZ9nc+fyhNjG

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks