General

  • Target

    6add3b967e9697afba8d11446f6eba1f5946758da36466716c8d666547ea7483

  • Size

    5.2MB

  • Sample

    231124-lqc7nahd89

  • MD5

    bad091502b3c67ba29c288550a139231

  • SHA1

    45cc890410ca4b23cb0056792e1c82402b1bd742

  • SHA256

    6add3b967e9697afba8d11446f6eba1f5946758da36466716c8d666547ea7483

  • SHA512

    288ac3bfe3275a66866d88c09129fe569e8b534ad435b808c340070aa156a235140aad8b35111eb34f7ec3c480a6e65e76e4acbe917988239c89533aef918ec6

  • SSDEEP

    98304:NchHMKyDyc70SwAvO01JgBixtqMhlE4f+Ue/czLiRZvcFqhblsXlwagEblE:my3l80DBl5f+2QvQus1zgCu

Score
7/10

Malware Config

Targets

    • Target

      6add3b967e9697afba8d11446f6eba1f5946758da36466716c8d666547ea7483

    • Size

      5.2MB

    • MD5

      bad091502b3c67ba29c288550a139231

    • SHA1

      45cc890410ca4b23cb0056792e1c82402b1bd742

    • SHA256

      6add3b967e9697afba8d11446f6eba1f5946758da36466716c8d666547ea7483

    • SHA512

      288ac3bfe3275a66866d88c09129fe569e8b534ad435b808c340070aa156a235140aad8b35111eb34f7ec3c480a6e65e76e4acbe917988239c89533aef918ec6

    • SSDEEP

      98304:NchHMKyDyc70SwAvO01JgBixtqMhlE4f+Ue/czLiRZvcFqhblsXlwagEblE:my3l80DBl5f+2QvQus1zgCu

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks