General

  • Target

    00185b8f0bcf8602c6b9018cb60852dca80fd47f1163879f15c314191cfe3bae

  • Size

    2.7MB

  • Sample

    231123-xk1asacc7x

  • MD5

    f16d1800781dd35b67aff3f69e70d19e

  • SHA1

    fbd8dcf17439b013c34625624f86b10bf9424f6d

  • SHA256

    00185b8f0bcf8602c6b9018cb60852dca80fd47f1163879f15c314191cfe3bae

  • SHA512

    a58f27068eb9bc7426222fa8b68f6acbfc0ad3a9bb5a74d4064a079b031c5d0d5fb4d4a89df9110e8fbc7c9f8dcc059b2b5073db507812423e2652a3e63b8416

  • SSDEEP

    49152:42YwvLbBL8IQbDbq6hhFiucmUHq2uK3njQJJmgBkVrAhUQCe4f4/fzdedvQRY0E:1fvXBLk42UHuK3jWXWKOe4fWdmQlE

Score
7/10

Malware Config

Targets

    • Target

      00185b8f0bcf8602c6b9018cb60852dca80fd47f1163879f15c314191cfe3bae

    • Size

      2.7MB

    • MD5

      f16d1800781dd35b67aff3f69e70d19e

    • SHA1

      fbd8dcf17439b013c34625624f86b10bf9424f6d

    • SHA256

      00185b8f0bcf8602c6b9018cb60852dca80fd47f1163879f15c314191cfe3bae

    • SHA512

      a58f27068eb9bc7426222fa8b68f6acbfc0ad3a9bb5a74d4064a079b031c5d0d5fb4d4a89df9110e8fbc7c9f8dcc059b2b5073db507812423e2652a3e63b8416

    • SSDEEP

      49152:42YwvLbBL8IQbDbq6hhFiucmUHq2uK3njQJJmgBkVrAhUQCe4f4/fzdedvQRY0E:1fvXBLk42UHuK3jWXWKOe4fWdmQlE

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks