Overview

overview

7

Static

static

3

d2ec79dea2...00.exe

windows7-x64

7

d2ec79dea2...00.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d2ec79dea2c343c76e98d2ff149c7ff39ca97d6bd169619a9db4383e860e3f00.zip

  • Size

    3.8MB

  • Sample

    231119-2c4qfsdb4x

  • MD5

    d2e1bf38517ad438b95f404f6dfa149b

  • SHA1

    dee97b2b6bc28136015f6b038c9b6250e0170715

  • SHA256

    be4843757433c4b76b7d54838b5cec952fe8d474cabb5d0f924c3eb6e8d482ab

  • SHA512

    531997b8adc6dce3ebba19bc4f07f27c217a5f5a868df7f6ec511252e54f5908f06fa72bda1b0e7fc1ca55fe4c7adb13f1c11f125a7f18a35d6e15241623f247

  • SSDEEP

    98304:TcACA2My3JZlW4oRW84h4VYkXSEKE3fk2Q+YnUvA19r:wQ2M0JZQ4uW82kX163

Score
7/10
discovery

Malware Config

Targets

    • Target

      d2ec79dea2c343c76e98d2ff149c7ff39ca97d6bd169619a9db4383e860e3f00.exe

    • Size

      4.0MB

    • MD5

      20eed4441eab2600d935db7d8384a807

    • SHA1

      3acf7f616dd5463a73bafb79379a22a1fac6ccde

    • SHA256

      d2ec79dea2c343c76e98d2ff149c7ff39ca97d6bd169619a9db4383e860e3f00

    • SHA512

      ae67536b2fbe4d88d15e39aa50713f676c0450f53ac5cbd0502d1f66130dfdcda0b9e4476598133400b79c19d4c5d95f15153ca9c81d1c97474e3ea838159624

    • SSDEEP

      98304:ldZzBLmJR0be89sNUsyV4G6utggjMUQe7mMlEfy9HUsc3AX6fi7e:PZzkJebJsNbmV6HPe9Ef00n3jfi7e

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks