General

  • Target

    474fa572373d6390e9fb3f4826ccb5d81ffa885c52c27173b68ea2f7f133bfcf

  • Size

    5.6MB

  • Sample

    231114-nnsknsca2y

  • MD5

    0ecf7b2a8c1f1d2357039463174d829b

  • SHA1

    5e4e102fb5f2f222750d085ce2c7b77a46f393bc

  • SHA256

    474fa572373d6390e9fb3f4826ccb5d81ffa885c52c27173b68ea2f7f133bfcf

  • SHA512

    bf38cf24eb339d6b7e0558dceded9d6e2a5ae5737768115cdb71ea40972ceddbe47f1854c066e7dcfb55721ed2d833e69a4fb665ca928bcf7c197f924e9a8e66

  • SSDEEP

    98304:EiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:FRm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score
7/10

Malware Config

Targets

    • Target

      474fa572373d6390e9fb3f4826ccb5d81ffa885c52c27173b68ea2f7f133bfcf

    • Size

      5.6MB

    • MD5

      0ecf7b2a8c1f1d2357039463174d829b

    • SHA1

      5e4e102fb5f2f222750d085ce2c7b77a46f393bc

    • SHA256

      474fa572373d6390e9fb3f4826ccb5d81ffa885c52c27173b68ea2f7f133bfcf

    • SHA512

      bf38cf24eb339d6b7e0558dceded9d6e2a5ae5737768115cdb71ea40972ceddbe47f1854c066e7dcfb55721ed2d833e69a4fb665ca928bcf7c197f924e9a8e66

    • SSDEEP

      98304:EiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:FRm1syxacY48eda2TMpQdZ9nc+fyhNjG

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks