General

  • Target

    67cdea1c53437b64eccdc1a801f600c9620d9dc88d8e94313f31a2f9c7a66369

  • Size

    2.9MB

  • Sample

    231124-ctv27sfe4x

  • MD5

    3294583e51ba9cea6e998f3595c8ee27

  • SHA1

    ad4e9f7e4bbde4a89b58d23f0ebbb68e3ee2c636

  • SHA256

    67cdea1c53437b64eccdc1a801f600c9620d9dc88d8e94313f31a2f9c7a66369

  • SHA512

    229d942a60b22505b612883bad5f1133c78b907982169da01dbd4fa92d510d6876026b55a7d2f9714ecb27d49de66632ede199cf35756e8e22aa3f2ed767bd54

  • SSDEEP

    49152:k2dKgqFC/iTqHv7bb9NfQSvzZxPQUlsMuiRPzGjNBi+tsvDcRY0E:pARFpTIXhJ51xlax/7TtsvIlE

Score
7/10

Malware Config

Targets

    • Target

      67cdea1c53437b64eccdc1a801f600c9620d9dc88d8e94313f31a2f9c7a66369

    • Size

      2.9MB

    • MD5

      3294583e51ba9cea6e998f3595c8ee27

    • SHA1

      ad4e9f7e4bbde4a89b58d23f0ebbb68e3ee2c636

    • SHA256

      67cdea1c53437b64eccdc1a801f600c9620d9dc88d8e94313f31a2f9c7a66369

    • SHA512

      229d942a60b22505b612883bad5f1133c78b907982169da01dbd4fa92d510d6876026b55a7d2f9714ecb27d49de66632ede199cf35756e8e22aa3f2ed767bd54

    • SSDEEP

      49152:k2dKgqFC/iTqHv7bb9NfQSvzZxPQUlsMuiRPzGjNBi+tsvDcRY0E:pARFpTIXhJ51xlax/7TtsvIlE

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks