General

  • Target

    8648c01e4fe3c3c0d3a95e45099e7cc9c664e8de1da47b503d408d1fb094da57

  • Size

    5.2MB

  • Sample

    231124-flea9sgf9x

  • MD5

    1ba83d367b36429ace65162ef1b7de81

  • SHA1

    bad05934a1637ad9fa385c427682090cd7548cfd

  • SHA256

    8648c01e4fe3c3c0d3a95e45099e7cc9c664e8de1da47b503d408d1fb094da57

  • SHA512

    74890475ae30216d61947bbe2c613a3673375e43ed334d8e349e60aa02e0cf485a6005c61fd03656332dae86868beadd59fb2640834fc1fe75a2d29e444c9573

  • SSDEEP

    98304:q4UQ13eDvQYGAyN/N99Ewn91ougfcSndlhRwcY3m5MXQBLuYZq0lE:ANTQUyJN99EjfRdlhRhY3UBLFFu

Score
7/10

Malware Config

Targets

    • Target

      8648c01e4fe3c3c0d3a95e45099e7cc9c664e8de1da47b503d408d1fb094da57

    • Size

      5.2MB

    • MD5

      1ba83d367b36429ace65162ef1b7de81

    • SHA1

      bad05934a1637ad9fa385c427682090cd7548cfd

    • SHA256

      8648c01e4fe3c3c0d3a95e45099e7cc9c664e8de1da47b503d408d1fb094da57

    • SHA512

      74890475ae30216d61947bbe2c613a3673375e43ed334d8e349e60aa02e0cf485a6005c61fd03656332dae86868beadd59fb2640834fc1fe75a2d29e444c9573

    • SSDEEP

      98304:q4UQ13eDvQYGAyN/N99Ewn91ougfcSndlhRwcY3m5MXQBLuYZq0lE:ANTQUyJN99EjfRdlhRhY3UBLFFu

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks