General

  • Target

    91372e5a28803227b6e3291b65cc9d6a15d9b2c6cfabb162e6694714593cba3f

  • Size

    5.6MB

  • Sample

    231105-g5hy8sbf8t

  • MD5

    bde735942e1f620ce72c7f3a661a907f

  • SHA1

    6725e1fc814b4f29c6aaf6228fa7c2633da11c70

  • SHA256

    91372e5a28803227b6e3291b65cc9d6a15d9b2c6cfabb162e6694714593cba3f

  • SHA512

    581ae659c3ec6517b7c6432cfa53f80960c8ebb00b2d04c125b4fc942bf9fff5c9fcb47d2317b51d30ffd9778a2d63c86de9c8d5ba53825d0fddf102cc660c07

  • SSDEEP

    98304:ZiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:IRm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score
7/10

Malware Config

Targets

    • Target

      91372e5a28803227b6e3291b65cc9d6a15d9b2c6cfabb162e6694714593cba3f

    • Size

      5.6MB

    • MD5

      bde735942e1f620ce72c7f3a661a907f

    • SHA1

      6725e1fc814b4f29c6aaf6228fa7c2633da11c70

    • SHA256

      91372e5a28803227b6e3291b65cc9d6a15d9b2c6cfabb162e6694714593cba3f

    • SHA512

      581ae659c3ec6517b7c6432cfa53f80960c8ebb00b2d04c125b4fc942bf9fff5c9fcb47d2317b51d30ffd9778a2d63c86de9c8d5ba53825d0fddf102cc660c07

    • SSDEEP

      98304:ZiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:IRm1syxacY48eda2TMpQdZ9nc+fyhNjG

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks