General

  • Target

    1c06834a6bd3f07da0d2b59bc1812bb0d48df90136ab1ccc057e53585c58f9eb

  • Size

    5.6MB

  • Sample

    231105-x3ersscf94

  • MD5

    b620aec336d0475257f7c9a0504d2576

  • SHA1

    06f26098ae6b13e677dcd218e1e8f8fe50a5b9ad

  • SHA256

    1c06834a6bd3f07da0d2b59bc1812bb0d48df90136ab1ccc057e53585c58f9eb

  • SHA512

    cae024fe36561c9b4fb6c12de6c1db86d063f6b1a111cc0e26ade1779360eb78b8d67c285aee80ccf05e49dc08e798cbd923dfcd5eb37d048abbd6da988992ba

  • SSDEEP

    98304:WiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:TRm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score
7/10

Malware Config

Targets

    • Target

      1c06834a6bd3f07da0d2b59bc1812bb0d48df90136ab1ccc057e53585c58f9eb

    • Size

      5.6MB

    • MD5

      b620aec336d0475257f7c9a0504d2576

    • SHA1

      06f26098ae6b13e677dcd218e1e8f8fe50a5b9ad

    • SHA256

      1c06834a6bd3f07da0d2b59bc1812bb0d48df90136ab1ccc057e53585c58f9eb

    • SHA512

      cae024fe36561c9b4fb6c12de6c1db86d063f6b1a111cc0e26ade1779360eb78b8d67c285aee80ccf05e49dc08e798cbd923dfcd5eb37d048abbd6da988992ba

    • SSDEEP

      98304:WiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:TRm1syxacY48eda2TMpQdZ9nc+fyhNjG

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks