General

  • Target

    021a8d004c93f013685a6c22528da5e0d2968e4cf7cdc28c43e6a59fa30d39c8

  • Size

    5.6MB

  • Sample

    231118-1lk42age9w

  • MD5

    d76948cdc0140513cd660dc27b311323

  • SHA1

    ce2d9279cafc18147e845504b5c81218c91aa3f1

  • SHA256

    021a8d004c93f013685a6c22528da5e0d2968e4cf7cdc28c43e6a59fa30d39c8

  • SHA512

    afe1b515898d48becf6b66ef1d53766a6e407dcf214b4e6cad82ae064eff91f29e5c4540053a82b4df33ef40f56e226c229e27343f6d194f67af1ecaa9fc05d8

  • SSDEEP

    98304:hiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:gRm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score
7/10

Malware Config

Targets

    • Target

      021a8d004c93f013685a6c22528da5e0d2968e4cf7cdc28c43e6a59fa30d39c8

    • Size

      5.6MB

    • MD5

      d76948cdc0140513cd660dc27b311323

    • SHA1

      ce2d9279cafc18147e845504b5c81218c91aa3f1

    • SHA256

      021a8d004c93f013685a6c22528da5e0d2968e4cf7cdc28c43e6a59fa30d39c8

    • SHA512

      afe1b515898d48becf6b66ef1d53766a6e407dcf214b4e6cad82ae064eff91f29e5c4540053a82b4df33ef40f56e226c229e27343f6d194f67af1ecaa9fc05d8

    • SSDEEP

      98304:hiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:gRm1syxacY48eda2TMpQdZ9nc+fyhNjG

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks