General

  • Target

    1fa6732a60468bc0c12657c6ac5916234c4b62a9e19a849abfb33246863869ef

  • Size

    4.0MB

  • Sample

    231106-kdthfaaa5t

  • MD5

    63c4cc8386d1fe0deec2db1650d73ced

  • SHA1

    9e30ed2f8be2c5106cee56e4485498113c55ca09

  • SHA256

    1fa6732a60468bc0c12657c6ac5916234c4b62a9e19a849abfb33246863869ef

  • SHA512

    19d625b35571abd9582c2a3ecdf35d86f2f741ced23bae5f87badc3a06bf507d8a733d95721d8d0db46caaa7a14a9063e34d0976e9acc935ee975c7be596f1b1

  • SSDEEP

    98304:IdgDEyNzq5mCwBXRBX1soDprsUMZDBz5erNmO7e:IgDEyrvhR1suKZDLerNh7e

Score
7/10

Malware Config

Targets

    • Target

      1fa6732a60468bc0c12657c6ac5916234c4b62a9e19a849abfb33246863869ef

    • Size

      4.0MB

    • MD5

      63c4cc8386d1fe0deec2db1650d73ced

    • SHA1

      9e30ed2f8be2c5106cee56e4485498113c55ca09

    • SHA256

      1fa6732a60468bc0c12657c6ac5916234c4b62a9e19a849abfb33246863869ef

    • SHA512

      19d625b35571abd9582c2a3ecdf35d86f2f741ced23bae5f87badc3a06bf507d8a733d95721d8d0db46caaa7a14a9063e34d0976e9acc935ee975c7be596f1b1

    • SSDEEP

      98304:IdgDEyNzq5mCwBXRBX1soDprsUMZDBz5erNmO7e:IgDEyrvhR1suKZDLerNh7e

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks