General

  • Target

    9dd87ffb3c67864c365e1dc2d2e8530b29f7bb015ca8ac99a813c4975d641d3e

  • Size

    5.2MB

  • Sample

    231124-erdq9afc38

  • MD5

    6480934937609a3bf6c206be8ca6d9bc

  • SHA1

    c25d1c317abe2274d1ae0299447c8bd9b96107c4

  • SHA256

    9dd87ffb3c67864c365e1dc2d2e8530b29f7bb015ca8ac99a813c4975d641d3e

  • SHA512

    a4f9500bc33e2430dd41c12199c304bb4cea61d5fb65281a2d5af28ad54856dfbd03730d761155fe1db80bc6b5151c42b3e1c5739793ca08ada732d6e5904b9a

  • SSDEEP

    98304:B4UQ13eDvQYGAyN/N99Ewn91ougfcSndlhRwcY3m5MXQBLuYZq0lE:tNTQUyJN99EjfRdlhRhY3UBLFFu

Score
7/10

Malware Config

Targets

    • Target

      9dd87ffb3c67864c365e1dc2d2e8530b29f7bb015ca8ac99a813c4975d641d3e

    • Size

      5.2MB

    • MD5

      6480934937609a3bf6c206be8ca6d9bc

    • SHA1

      c25d1c317abe2274d1ae0299447c8bd9b96107c4

    • SHA256

      9dd87ffb3c67864c365e1dc2d2e8530b29f7bb015ca8ac99a813c4975d641d3e

    • SHA512

      a4f9500bc33e2430dd41c12199c304bb4cea61d5fb65281a2d5af28ad54856dfbd03730d761155fe1db80bc6b5151c42b3e1c5739793ca08ada732d6e5904b9a

    • SSDEEP

      98304:B4UQ13eDvQYGAyN/N99Ewn91ougfcSndlhRwcY3m5MXQBLuYZq0lE:tNTQUyJN99EjfRdlhRhY3UBLFFu

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks