General

  • Target

    3bbade7ef7e11005451a4973ec7c9310b12b3adafa053df1385d3b3d57e3e051

  • Size

    5.6MB

  • Sample

    231117-pmccqsac61

  • MD5

    3a42f76049720e610f20d8a2f61fe5a9

  • SHA1

    89367eee2a13880b1bf849e4628295cf56aaa481

  • SHA256

    3bbade7ef7e11005451a4973ec7c9310b12b3adafa053df1385d3b3d57e3e051

  • SHA512

    df706ed8c2a7d3f03ac0081875f7a8d04f09d9c7d7977ddf4e42eea63e1ba878918a84e20a5420f879d0e8c51309ca02a933a97287df54941be87fc004cde7f9

  • SSDEEP

    98304:qiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:/Rm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score
7/10

Malware Config

Targets

    • Target

      3bbade7ef7e11005451a4973ec7c9310b12b3adafa053df1385d3b3d57e3e051

    • Size

      5.6MB

    • MD5

      3a42f76049720e610f20d8a2f61fe5a9

    • SHA1

      89367eee2a13880b1bf849e4628295cf56aaa481

    • SHA256

      3bbade7ef7e11005451a4973ec7c9310b12b3adafa053df1385d3b3d57e3e051

    • SHA512

      df706ed8c2a7d3f03ac0081875f7a8d04f09d9c7d7977ddf4e42eea63e1ba878918a84e20a5420f879d0e8c51309ca02a933a97287df54941be87fc004cde7f9

    • SSDEEP

      98304:qiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:/Rm1syxacY48eda2TMpQdZ9nc+fyhNjG

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks