General

  • Target

    8b9a9fc57ca9f8a53bc2a257282f97a07a602045fd9751985e6283d1c3a14b91

  • Size

    2.9MB

  • Sample

    231123-yzxzmsch8t

  • MD5

    1b9753e0785b10ddde3ff4f502b8d432

  • SHA1

    1cc52d8a44e7b7d192927366585c44cfdc14a89f

  • SHA256

    8b9a9fc57ca9f8a53bc2a257282f97a07a602045fd9751985e6283d1c3a14b91

  • SHA512

    c7d7f2fd67e3ef7ab2b4c65b041dbe04d2713f792d47dabd003a0e69892c44536f6b52b21d1f1fd5ffc38b2be68d8dd90d9b9171ddf5ed6f8d1bcbab57aa4461

  • SSDEEP

    49152:E2dKgqFC/iTqHv7bb9NfQSvzZxPQUlsMuiRPzGjNBi+tsvDcRY0E:JARFpTIXhJ51xlax/7TtsvIlE

Score
7/10

Malware Config

Targets

    • Target

      8b9a9fc57ca9f8a53bc2a257282f97a07a602045fd9751985e6283d1c3a14b91

    • Size

      2.9MB

    • MD5

      1b9753e0785b10ddde3ff4f502b8d432

    • SHA1

      1cc52d8a44e7b7d192927366585c44cfdc14a89f

    • SHA256

      8b9a9fc57ca9f8a53bc2a257282f97a07a602045fd9751985e6283d1c3a14b91

    • SHA512

      c7d7f2fd67e3ef7ab2b4c65b041dbe04d2713f792d47dabd003a0e69892c44536f6b52b21d1f1fd5ffc38b2be68d8dd90d9b9171ddf5ed6f8d1bcbab57aa4461

    • SSDEEP

      49152:E2dKgqFC/iTqHv7bb9NfQSvzZxPQUlsMuiRPzGjNBi+tsvDcRY0E:JARFpTIXhJ51xlax/7TtsvIlE

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks