General

  • Target

    99787b8bcdc2e58b6c3c0c89a1e90bb5a1bbf7c8c91b8097fd0d220455e0af7b

  • Size

    2.9MB

  • Sample

    231124-d3q1aaga5v

  • MD5

    8489c0a1618f79ea1a1c1beb4e7a6bbd

  • SHA1

    06d92b3fd32aefd10856ded2e9ee1b1a9679dd3c

  • SHA256

    99787b8bcdc2e58b6c3c0c89a1e90bb5a1bbf7c8c91b8097fd0d220455e0af7b

  • SHA512

    72793ae70b091981463a83f76b251be07448ce07bd2c087dc6697a7dbf1ae464bd36762bd0f9ad50a1bd9cd44679428db9c3bbea88970e0eef67c1017c3fdac1

  • SSDEEP

    49152:f2jrjz+ZNL6x3OoqXinu3JTWWkrL/G708RmUM6UE/LSfblkkvQ1E5RY0E:+zzKiQSu3WetRmUoE/LSfblkA+E5lE

Score
7/10

Malware Config

Targets

    • Target

      99787b8bcdc2e58b6c3c0c89a1e90bb5a1bbf7c8c91b8097fd0d220455e0af7b

    • Size

      2.9MB

    • MD5

      8489c0a1618f79ea1a1c1beb4e7a6bbd

    • SHA1

      06d92b3fd32aefd10856ded2e9ee1b1a9679dd3c

    • SHA256

      99787b8bcdc2e58b6c3c0c89a1e90bb5a1bbf7c8c91b8097fd0d220455e0af7b

    • SHA512

      72793ae70b091981463a83f76b251be07448ce07bd2c087dc6697a7dbf1ae464bd36762bd0f9ad50a1bd9cd44679428db9c3bbea88970e0eef67c1017c3fdac1

    • SSDEEP

      49152:f2jrjz+ZNL6x3OoqXinu3JTWWkrL/G708RmUM6UE/LSfblkkvQ1E5RY0E:+zzKiQSu3WetRmUoE/LSfblkA+E5lE

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks