General

  • Target

    0c75199e328c68f1345c7f53c1fe194167bf5d54b01ee73e5a068c35df98c8f5

  • Size

    4.0MB

  • Sample

    231113-xrf6gsfb27

  • MD5

    6e3a255fca8b0a9919aafd7e2aa31536

  • SHA1

    27e5cdbd2b8922853117fe5d1d5756b5fc1fff0b

  • SHA256

    0c75199e328c68f1345c7f53c1fe194167bf5d54b01ee73e5a068c35df98c8f5

  • SHA512

    cc511373381e5ca9f306cf6e56757bec7e09882ea38d768605a31fe48c73aa3203235c71637238e5b92f4a01c9e9120b0ebe536f22fb44032594a1ea9cc51d7d

  • SSDEEP

    98304:kdL9xWLs1Esvx3VRy2XOwnqoQyVHXoblgL74+7e:szwM5S2X9qM3oqLU+7e

Score
7/10

Malware Config

Targets

    • Target

      0c75199e328c68f1345c7f53c1fe194167bf5d54b01ee73e5a068c35df98c8f5

    • Size

      4.0MB

    • MD5

      6e3a255fca8b0a9919aafd7e2aa31536

    • SHA1

      27e5cdbd2b8922853117fe5d1d5756b5fc1fff0b

    • SHA256

      0c75199e328c68f1345c7f53c1fe194167bf5d54b01ee73e5a068c35df98c8f5

    • SHA512

      cc511373381e5ca9f306cf6e56757bec7e09882ea38d768605a31fe48c73aa3203235c71637238e5b92f4a01c9e9120b0ebe536f22fb44032594a1ea9cc51d7d

    • SSDEEP

      98304:kdL9xWLs1Esvx3VRy2XOwnqoQyVHXoblgL74+7e:szwM5S2X9qM3oqLU+7e

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks