General

  • Target

    a79b19ba5460bf3ab94dc4e8118be5c6448c2e99869e3e6e6f151ea99ba2c5e3

  • Size

    5.6MB

  • Sample

    231106-esaqzsad75

  • MD5

    da05ec274e41edfe207b3655bfaf2c1b

  • SHA1

    37869c45a068fbaf5c3ed0138520a7ae72a2707d

  • SHA256

    a79b19ba5460bf3ab94dc4e8118be5c6448c2e99869e3e6e6f151ea99ba2c5e3

  • SHA512

    b554ed6327dfda02f9084229e9bba0ac3a2985ebe3be109803566b549f729004d03cf00957c2df050d1be7e78cb5e46fa11fd8772f4bdaccf568cf8b2122af77

  • SSDEEP

    98304:3iRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:SRm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score
7/10

Malware Config

Targets

    • Target

      a79b19ba5460bf3ab94dc4e8118be5c6448c2e99869e3e6e6f151ea99ba2c5e3

    • Size

      5.6MB

    • MD5

      da05ec274e41edfe207b3655bfaf2c1b

    • SHA1

      37869c45a068fbaf5c3ed0138520a7ae72a2707d

    • SHA256

      a79b19ba5460bf3ab94dc4e8118be5c6448c2e99869e3e6e6f151ea99ba2c5e3

    • SHA512

      b554ed6327dfda02f9084229e9bba0ac3a2985ebe3be109803566b549f729004d03cf00957c2df050d1be7e78cb5e46fa11fd8772f4bdaccf568cf8b2122af77

    • SSDEEP

      98304:3iRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:SRm1syxacY48eda2TMpQdZ9nc+fyhNjG

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks