General

  • Target

    40d3bd9bfe202963f0d16c5ebe37b1d602b2d63a253881a90b832c1a48578452

  • Size

    5.6MB

  • Sample

    231105-geg91sdc76

  • MD5

    9e3936d196ca675770307dae917aae4f

  • SHA1

    eed6c351146719927bf0a4fdb51a9027a6887371

  • SHA256

    40d3bd9bfe202963f0d16c5ebe37b1d602b2d63a253881a90b832c1a48578452

  • SHA512

    a22bc6ad2e23ef8f2f58efd4268f11601e72e76593e2419156c56bab575214d7939882b91311b8818117d91d7d51f8e9099001bfe186af2aaf73186e9cdcd8fc

  • SSDEEP

    98304:aiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:PRm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score
7/10

Malware Config

Targets

    • Target

      40d3bd9bfe202963f0d16c5ebe37b1d602b2d63a253881a90b832c1a48578452

    • Size

      5.6MB

    • MD5

      9e3936d196ca675770307dae917aae4f

    • SHA1

      eed6c351146719927bf0a4fdb51a9027a6887371

    • SHA256

      40d3bd9bfe202963f0d16c5ebe37b1d602b2d63a253881a90b832c1a48578452

    • SHA512

      a22bc6ad2e23ef8f2f58efd4268f11601e72e76593e2419156c56bab575214d7939882b91311b8818117d91d7d51f8e9099001bfe186af2aaf73186e9cdcd8fc

    • SSDEEP

      98304:aiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:PRm1syxacY48eda2TMpQdZ9nc+fyhNjG

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks