General

  • Target

    0b63fb8c962ed8df4109aa4a1632fd5e42f1df816014cccc0c8ce4d171d59c18

  • Size

    5.6MB

  • Sample

    231114-fhqvwsge7z

  • MD5

    ee0f6c8e86ba0597cc59b98071b47a8b

  • SHA1

    6dedfcfdf9ba8d72616e20c4e98671acd1de4fa9

  • SHA256

    0b63fb8c962ed8df4109aa4a1632fd5e42f1df816014cccc0c8ce4d171d59c18

  • SHA512

    2e01f49a81cb4daaaabef44cd053eb523f66069c1b118839820238f3e44f685e8c5282e8a33fed6ad327db4bcac1120f078ff8166a8fc301858e52eab7aeffb9

  • SSDEEP

    98304:FiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:cRm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score
7/10

Malware Config

Targets

    • Target

      0b63fb8c962ed8df4109aa4a1632fd5e42f1df816014cccc0c8ce4d171d59c18

    • Size

      5.6MB

    • MD5

      ee0f6c8e86ba0597cc59b98071b47a8b

    • SHA1

      6dedfcfdf9ba8d72616e20c4e98671acd1de4fa9

    • SHA256

      0b63fb8c962ed8df4109aa4a1632fd5e42f1df816014cccc0c8ce4d171d59c18

    • SHA512

      2e01f49a81cb4daaaabef44cd053eb523f66069c1b118839820238f3e44f685e8c5282e8a33fed6ad327db4bcac1120f078ff8166a8fc301858e52eab7aeffb9

    • SSDEEP

      98304:FiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:cRm1syxacY48eda2TMpQdZ9nc+fyhNjG

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks