General

  • Target

    399e8c9b11186cf6e09ed9154208ba31bdc9fd1f9a334ec1a9fe4518639c09a9

  • Size

    5.6MB

  • Sample

    231105-h41nbsea32

  • MD5

    d9c5b3dbd74208cb558a669497707458

  • SHA1

    4d9153563eb6bb867c4c7443f565d4c0766158e1

  • SHA256

    399e8c9b11186cf6e09ed9154208ba31bdc9fd1f9a334ec1a9fe4518639c09a9

  • SHA512

    e3ba61d60b497292a90273e3cc05f9733d63d71283aac99e1db2eecde2cd4785caafefb757050e68ffc06a2b3fea02ea4496752a425d13bdc4310db1d39e97f9

  • SSDEEP

    98304:yiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:3Rm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score
7/10

Malware Config

Targets

    • Target

      399e8c9b11186cf6e09ed9154208ba31bdc9fd1f9a334ec1a9fe4518639c09a9

    • Size

      5.6MB

    • MD5

      d9c5b3dbd74208cb558a669497707458

    • SHA1

      4d9153563eb6bb867c4c7443f565d4c0766158e1

    • SHA256

      399e8c9b11186cf6e09ed9154208ba31bdc9fd1f9a334ec1a9fe4518639c09a9

    • SHA512

      e3ba61d60b497292a90273e3cc05f9733d63d71283aac99e1db2eecde2cd4785caafefb757050e68ffc06a2b3fea02ea4496752a425d13bdc4310db1d39e97f9

    • SSDEEP

      98304:yiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:3Rm1syxacY48eda2TMpQdZ9nc+fyhNjG

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks