General

  • Target

    c59da787273a0b4ea184e7acdf323c160e32a9430d17a612466a388133259db5

  • Size

    5.2MB

  • Sample

    231124-h193lahe71

  • MD5

    448295152890784f45a9068f121859b8

  • SHA1

    e5f85db95ff81073d2000706d17edf8e071586db

  • SHA256

    c59da787273a0b4ea184e7acdf323c160e32a9430d17a612466a388133259db5

  • SHA512

    8fbf796a255f52fa4a174d7b5988f3b9bb28204a52251103971c87fb6dbf8df761aa721c5c68fe6dab82522000080862953c6f8164d4dc8308364c374438ef10

  • SSDEEP

    98304:z4UQ13eDvQYGAyN/N99Ewn91ougfcSndlhRwcY3m5MXQBLuYZq0lE:fNTQUyJN99EjfRdlhRhY3UBLFFu

Score
7/10

Malware Config

Targets

    • Target

      c59da787273a0b4ea184e7acdf323c160e32a9430d17a612466a388133259db5

    • Size

      5.2MB

    • MD5

      448295152890784f45a9068f121859b8

    • SHA1

      e5f85db95ff81073d2000706d17edf8e071586db

    • SHA256

      c59da787273a0b4ea184e7acdf323c160e32a9430d17a612466a388133259db5

    • SHA512

      8fbf796a255f52fa4a174d7b5988f3b9bb28204a52251103971c87fb6dbf8df761aa721c5c68fe6dab82522000080862953c6f8164d4dc8308364c374438ef10

    • SSDEEP

      98304:z4UQ13eDvQYGAyN/N99Ewn91ougfcSndlhRwcY3m5MXQBLuYZq0lE:fNTQUyJN99EjfRdlhRhY3UBLFFu

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks