General

  • Target

    ce9815ae728c9d644160510852898735503f433b6d17c9e8357f60e35f232144

  • Size

    5.2MB

  • Sample

    231124-g3a6lshb9v

  • MD5

    e1dee937b7535759731548338c47b6d2

  • SHA1

    d9406567b18958978ac9874b07684927c91a0d85

  • SHA256

    ce9815ae728c9d644160510852898735503f433b6d17c9e8357f60e35f232144

  • SHA512

    2bedf3c6e55e84581d67a4bf60dd640bd56a72aa99dfad9b61ff0698635868002f3d429525b9b153bf5c2648ff62ce4a03ac1374697d3751a7592435c84cd892

  • SSDEEP

    98304:X4UQ13eDvQYGAyN/N99Ewn91ougfcSndlhRwcY3m5MXQBLuYZq0lE:rNTQUyJN99EjfRdlhRhY3UBLFFu

Score
7/10

Malware Config

Targets

    • Target

      ce9815ae728c9d644160510852898735503f433b6d17c9e8357f60e35f232144

    • Size

      5.2MB

    • MD5

      e1dee937b7535759731548338c47b6d2

    • SHA1

      d9406567b18958978ac9874b07684927c91a0d85

    • SHA256

      ce9815ae728c9d644160510852898735503f433b6d17c9e8357f60e35f232144

    • SHA512

      2bedf3c6e55e84581d67a4bf60dd640bd56a72aa99dfad9b61ff0698635868002f3d429525b9b153bf5c2648ff62ce4a03ac1374697d3751a7592435c84cd892

    • SSDEEP

      98304:X4UQ13eDvQYGAyN/N99Ewn91ougfcSndlhRwcY3m5MXQBLuYZq0lE:rNTQUyJN99EjfRdlhRhY3UBLFFu

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks