General

  • Target

    6ba435f381c2a5b73af5417532a5512b214566e5905f31eca3864d4d9183d6aa

  • Size

    2.7MB

  • Sample

    231123-w6zqpscb81

  • MD5

    b4c1a75fb5cccccce1d4089546ae2434

  • SHA1

    6654f9209f20db57331fce41d60d9af6d05002c6

  • SHA256

    6ba435f381c2a5b73af5417532a5512b214566e5905f31eca3864d4d9183d6aa

  • SHA512

    03c9916f9c2cf13f28122cf9ff09406e13cf624916688fec5f55bf613b0ea5d1e7d7840e865d0b24d56382aaf57f3a4cdd08b8b07d794f2b30a287831f23f0b0

  • SSDEEP

    49152:A2YwvLbBL8IQbDbq6hhFiucmUHq2uK3njQJJmgBkVrAhUQCe4f4/fzdedvQRY0E:tfvXBLk42UHuK3jWXWKOe4fWdmQlE

Score
7/10

Malware Config

Targets

    • Target

      6ba435f381c2a5b73af5417532a5512b214566e5905f31eca3864d4d9183d6aa

    • Size

      2.7MB

    • MD5

      b4c1a75fb5cccccce1d4089546ae2434

    • SHA1

      6654f9209f20db57331fce41d60d9af6d05002c6

    • SHA256

      6ba435f381c2a5b73af5417532a5512b214566e5905f31eca3864d4d9183d6aa

    • SHA512

      03c9916f9c2cf13f28122cf9ff09406e13cf624916688fec5f55bf613b0ea5d1e7d7840e865d0b24d56382aaf57f3a4cdd08b8b07d794f2b30a287831f23f0b0

    • SSDEEP

      49152:A2YwvLbBL8IQbDbq6hhFiucmUHq2uK3njQJJmgBkVrAhUQCe4f4/fzdedvQRY0E:tfvXBLk42UHuK3jWXWKOe4fWdmQlE

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks