18c87ff4db9395b047e6f886d424267fac64b0e232685923e1cdfd2f23563f03 | Triage

Sharing

General

Target

NEAS.18c87ff4db9395b047e6f886d424267fac64b0e232685923e1cdfd2f23563f03.exe
Size

4.0MB
Sample

231114-lkl8daaf4v
MD5

cfaeccc08a809a5c0044ddc1927519cf
SHA1

5d9de4e2320eb09fd50c02c95d67fef703ef3d8d
SHA256

18c87ff4db9395b047e6f886d424267fac64b0e232685923e1cdfd2f23563f03
SHA512

c0191fb02c52e5d9a4b1ed4a448887e9ca16bfcc2aba4d5c2141bdc0422eb1b043dfe262d069abccbb31e88a4c0f877df06cdbc9e497c34612c8364ed2f2476b
SSDEEP

98304:/dL9xWLs1Esvx3VRy2XOwnqoQyVHXoblgL74+7e:VzwM5S2X9qM3oqLU+7e

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  NEAS.18c87ff4db9395b047e6f886d424267fac64b0e232685923e1cdfd2f23563f03.exe
- Size
  
  4.0MB
- MD5
  
  cfaeccc08a809a5c0044ddc1927519cf
- SHA1
  
  5d9de4e2320eb09fd50c02c95d67fef703ef3d8d
- SHA256
  
  18c87ff4db9395b047e6f886d424267fac64b0e232685923e1cdfd2f23563f03
- SHA512
  
  c0191fb02c52e5d9a4b1ed4a448887e9ca16bfcc2aba4d5c2141bdc0422eb1b043dfe262d069abccbb31e88a4c0f877df06cdbc9e497c34612c8364ed2f2476b
- SSDEEP
  
  98304:/dL9xWLs1Esvx3VRy2XOwnqoQyVHXoblgL74+7e:VzwM5S2X9qM3oqLU+7e
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Unexpected DNS network traffic destination
  Network traffic to other servers than the configured DNS servers was detected on the DNS port.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2