dece9ee68e319ffd7e33d12aec67a06b10cade17dfc4c1ca911de4d5ee4cd6da | Triage

Resubmissions

05/11/2023, 13:29

231105-qq8qsahb56 7

05/11/2023, 13:27

231105-qqlagsfc3y 7

Sharing

General

Target

dece9ee68e319ffd7e33d12aec67a06b10cade17dfc4c1ca911de4d5ee4cd6da
Size

5.6MB
Sample

231105-qq8qsahb56
MD5

7f0e7c4985ee91e9fdfa8ee9f5006330
SHA1

2716c0f3ad2ff0e4cb649be063751f4b50cb2e9e
SHA256

dece9ee68e319ffd7e33d12aec67a06b10cade17dfc4c1ca911de4d5ee4cd6da
SHA512

8c8632f3829f06baff408df8c140d07a1d9ab03983f9286b5b8aa5003dfd8576a83b01374abe792ffe76dddc040fec2b688b6c150168a83d0dc34f2cac9e202c
SSDEEP

98304:FiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:cRm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  dece9ee68e319ffd7e33d12aec67a06b10cade17dfc4c1ca911de4d5ee4cd6da
- Size
  
  5.6MB
- MD5
  
  7f0e7c4985ee91e9fdfa8ee9f5006330
- SHA1
  
  2716c0f3ad2ff0e4cb649be063751f4b50cb2e9e
- SHA256
  
  dece9ee68e319ffd7e33d12aec67a06b10cade17dfc4c1ca911de4d5ee4cd6da
- SHA512
  
  8c8632f3829f06baff408df8c140d07a1d9ab03983f9286b5b8aa5003dfd8576a83b01374abe792ffe76dddc040fec2b688b6c150168a83d0dc34f2cac9e202c
- SSDEEP
  
  98304:FiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:cRm1syxacY48eda2TMpQdZ9nc+fyhNjG
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Unexpected DNS network traffic destination
  Network traffic to other servers than the configured DNS servers was detected on the DNS port.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3