General

  • Target

    4984274a34495173fcb3e2a1dea221440e01907a0b55273a6b86add1d3b8ecaa

  • Size

    5.6MB

  • Sample

    231105-pveg3aeg51

  • MD5

    dccc562a772ec6c003873ad6cedc5b13

  • SHA1

    77b9ae48cf80a079ebbe8aeb2b284af8fdd8f3bd

  • SHA256

    4984274a34495173fcb3e2a1dea221440e01907a0b55273a6b86add1d3b8ecaa

  • SHA512

    588d15b38a3a5249520926427bd36862d945835890b871c00d1cf17a9e658f754d8a726f7190c72feb166d247aa3102b0990029ba2c3deda43aa5e72d32a5ffc

  • SSDEEP

    98304:ciRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:NRm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score
7/10

Malware Config

Targets

    • Target

      4984274a34495173fcb3e2a1dea221440e01907a0b55273a6b86add1d3b8ecaa

    • Size

      5.6MB

    • MD5

      dccc562a772ec6c003873ad6cedc5b13

    • SHA1

      77b9ae48cf80a079ebbe8aeb2b284af8fdd8f3bd

    • SHA256

      4984274a34495173fcb3e2a1dea221440e01907a0b55273a6b86add1d3b8ecaa

    • SHA512

      588d15b38a3a5249520926427bd36862d945835890b871c00d1cf17a9e658f754d8a726f7190c72feb166d247aa3102b0990029ba2c3deda43aa5e72d32a5ffc

    • SSDEEP

      98304:ciRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:NRm1syxacY48eda2TMpQdZ9nc+fyhNjG

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks