General

  • Target

    85f80196207009b50249b18b8ff5a8073ddbb67a019efcd6e6842ac8233ba7be

  • Size

    5.6MB

  • Sample

    231106-cwyacafh9x

  • MD5

    6ae4ee0784d1137c8b2dbad846c41015

  • SHA1

    4675d56834949799919a2ef1aeb9bbd3d8bde123

  • SHA256

    85f80196207009b50249b18b8ff5a8073ddbb67a019efcd6e6842ac8233ba7be

  • SHA512

    354581b1210e00c73a2004d71389a5dfcef15d80f0b9a0b0c5bf0741db4165b0c0b0ac6c23a76a7af3be356beae1269c9708ba625f3c2983e11e3a928685f2c7

  • SSDEEP

    98304:9iRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:kRm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score
7/10

Malware Config

Targets

    • Target

      85f80196207009b50249b18b8ff5a8073ddbb67a019efcd6e6842ac8233ba7be

    • Size

      5.6MB

    • MD5

      6ae4ee0784d1137c8b2dbad846c41015

    • SHA1

      4675d56834949799919a2ef1aeb9bbd3d8bde123

    • SHA256

      85f80196207009b50249b18b8ff5a8073ddbb67a019efcd6e6842ac8233ba7be

    • SHA512

      354581b1210e00c73a2004d71389a5dfcef15d80f0b9a0b0c5bf0741db4165b0c0b0ac6c23a76a7af3be356beae1269c9708ba625f3c2983e11e3a928685f2c7

    • SSDEEP

      98304:9iRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:kRm1syxacY48eda2TMpQdZ9nc+fyhNjG

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks